Wrenbase LLC (formerly Settle Labs LLC) ("we," "us," or "our") uses a small set of third-party service providers ("Subprocessors") to operate our platform. This page lists every Subprocessor that may process personal information on our behalf, the purpose of the processing, and where the processing takes place. We update this page when a Subprocessor is added or removed.
This list is provided for transparency. The contractual basis for our use of these Subprocessors is described in our Privacy Policy and, where applicable, in a Data Processing Agreement signed with the customer.
Infrastructure and platform
| Subprocessor | Purpose | Location |
|---|
| Amazon Web Services (AWS) | Cloud hosting, application compute, managed databases, object storage | United States |
| Amazon S3 Glacier | Encrypted backup and disaster-recovery storage | United States |
| Cloudflare, Inc. | Content delivery, edge caching, DNS, DDoS protection | Global edge network |
Payments
| Subprocessor | Purpose | Location |
|---|
| Stripe, Inc. | Subscription billing for Settle plans; Stripe Connect for invoice payment processing on behalf of Settle customers | United States |
| PayPal Holdings, Inc. | Invoice payment processing on behalf of Settle customers | United States |
Authentication and identity
| Subprocessor | Purpose | Location |
|---|
| Google LLC (Google Sign-In) | OAuth-based user authentication when users choose to sign in with Google | United States |
Communications
| Subprocessor | Purpose | Location |
|---|
| Resend, Inc. | Transactional and notification email delivery (magic-link sign-in, invoice and payment notifications, account alerts) | United States |
Artificial intelligence
| Subprocessor | Purpose | Location |
|---|
| Anthropic, PBC | Large-language-model inference for AI-assisted features (drafting, summarization, parsing) | United States |
| OpenAI, OpCo, LLC | Large-language-model inference for AI-assisted features (drafting, summarization, parsing) | United States |
| OpenRouter | Routing layer that brokers requests to upstream large-language-model providers | United States |
Settle's contracts with the AI providers above prohibit those providers from using customer inputs or outputs to train or improve their own foundation models, except as required to operate, secure, or monitor the AI service itself.
Security and fraud prevention
| Subprocessor | Purpose | Location |
|---|
| hCaptcha (Intuition Machines, Inc.) | Bot detection and abuse prevention on public-facing forms | United States |
Observability
| Subprocessor | Purpose | Location |
|---|
| Functional Software, Inc. (Sentry) | Application error and performance monitoring | United States |
| PostHog Inc. | Product analytics and feature-usage telemetry | United States |
User-authorized integrations
The following services are not Subprocessors in the GDPR sense, because Settle does not transmit personal information to them on its own initiative. Settle transmits data to these services only when a user explicitly connects their account and authorizes the connection. We list them here for transparency.
| Service | Purpose | Activated by |
|---|
| Google Calendar, Google Drive | Optional connected services for calendar-driven workflows and document archival | User OAuth grant |
| Mailchimp, QuickBooks, and others | Optional connected services for marketing-list sync, accounting export, and similar workflows. The full set of available connected services may change as new integrations are added. | User OAuth grant or API key |
Changes to this list
Settle may add or remove Subprocessors as the service evolves. The "Last updated" date at the top of this page reflects the most recent change. Customers with an executed Data Processing Agreement that requires advance notification of new Subprocessors will receive notice in accordance with the terms of that agreement.
Questions
If you have questions about Settle's Subprocessors or how your data is processed, contact us at [email protected].
