Subprocessors
The companies that process information for CaseFetch
Effective October 26, 2026
These companies process personal information for CaseFetch so we can run the Service. Each works under a written contract that limits its use of the information to providing its service to us. Only the first three ever handle a Firm’s client information. Under our Data Processing Addendum, we email the owner of each Team at least 30 days before a new subprocessor begins handling Firm Data.
| Company | What it does for CaseFetch | Personal information | Firm client information | Location |
|---|---|---|---|---|
| Supabase, Inc. | Database, sign-in, profile photo storage, live board updates, backups | All account, firm and security data | Yes, stored | United States (West, Northern California) |
| Railway | Runs the CaseFetch application | Passes through while handling requests; service logs, with email addresses and tokens removed | Yes, in transit | United States (West) |
| Themis Solutions Inc. (Clio) | The Firm’s own practice management system, which CaseFetch reads from and writes to for the Firm | Clio user and firm identity | Yes, source and destination | Where the Firm’s Clio account is hosted |
| Stripe, Inc. | Subscription billing and payments | Billing contact and payment details (held by Stripe only) | No | United States |
| Resend | Sends account email: invitations, verification codes, notices | Recipient email address and names in the message | No | United States |
| Google LLC | Optional “Sign in with Google” | Name, email address, profile photo link | No | United States |
| Microsoft Corporation | Optional “Sign in with Microsoft”, and our support inbox | Name and email address; whatever you write to us | Only if you send it | United States |
| Cloudflare, Inc. (Turnstile) | Checks that sign-in, sign-up and password-reset requests come from a person | IP address and browser and device characteristics, during the check | No | Cloudflare’s global network |
Clio is listed because CaseFetch exchanges data with it, but the Firm chooses Clio and contracts with it directly.
Not used
CaseFetch does not use analytics, advertising, session recording, error-monitoring or artificial intelligence services. Adding any of them would be a change to this list, made with notice.
Questions
Email carson@casefetch.io.