Subprocessors
The vetted third parties we use to operate Deduckt. Each is bound by a data processing agreement with confidentiality, security, and (where applicable) no-model-training and limited-retention obligations.
Last updated: June 14, 2026 · Questions: privacy@deduckt.ai
| Provider | Purpose | Data it handles | Region |
|---|---|---|---|
| Render | Application hosting and database | All service data, encrypted at rest | United States |
| Cloudflare | DNS, CDN, and edge security | Network traffic metadata; no stored tax data | Global edge |
| Plaid Inc. | Account linking (you choose to connect) | Investment holdings and transactions; not your bank login | United States |
| Anthropic (Claude) | Plain-language explanation of findings | Redacted figures only; never raw SSNs or account numbers | United States |
All tax calculations are performed by our own deterministic engine inside our trust boundary. We do not send Tier 1 data (Social Security numbers, financial account numbers, full tax documents) to any third-party model provider.
We will add an email delivery provider and a privacy-respecting analytics provider as those features go live, and this page will be updated accordingly. We notify customers of material changes to our subprocessors as described in our Privacy Policy.
This list is provided for transparency and is updated as our vendors change. It is not legal advice.