Last updated: October 2, 2026
Bosque Technologies Inc. ("Bosque") uses the third-party providers below to run the hosted Bosque service. They are our subprocessors when they handle personal data in a customer's workspace, and our service providers when they handle other personal information. Our Data Processing Addendum and Privacy Policy explain how this works.
This page covers the hosted service. If an organization runs Bosque on its own infrastructure, it chooses its own providers, and none of this list applies.
Core providers
These are used for every workspace.
| Provider | What it does for us | Data it handles |
|---|---|---|
| Convex | Database, application back end, file storage, scheduled jobs | All workspace content and account data |
| Clerk | Sign-in, sessions, user accounts, and organizations | Name, email address, profile picture, sign-in details, organization membership |
| OpenAI | AI processing: assistant answers, embeddings for search, AI writing, summaries, themes, and PDF reading. Also optional web search | Prompts and the parts of workspace content needed for a request; document text for embeddings |
| Vercel | Hosts the web application and serves the website | Web requests, IP addresses, and content in transit |
| Stripe | Payments, subscriptions, and invoicing | Billing contact, payment details (held by Stripe), plan, and invoice history |
Used only when a feature is turned on
| Provider | When it is used | Data it handles |
|---|---|---|
| UploadThing | Uploading images, files, audio, and video into the rich-text editor | The uploaded files |
| Composio | Connecting Google Drive, OneDrive and SharePoint, Notion, and Confluence as library sources | Connection tokens and the content imported from the connected services |
| Deepgram | Transcribing research recordings that are too large for the built-in path | The audio or video recording |
| Downsub | Fetching transcripts for YouTube videos added to a library | The video link |
| LlamaIndex (LlamaCloud) | Reading text from PDFs, where enabled | The PDF file and its extracted text |
| Microsoft | The Microsoft Teams bot, if a workspace uses it | Teams messages sent to the bot, the Teams user identity and email, and the bot's replies |
Third-party services that you choose to connect yourself, such as Google, Microsoft 365, Notion, and Atlassian, are not our subprocessors. They process data under your agreement with them.
Locations
Our providers process data in the United States and other countries where they or their own providers operate. Where personal data is transferred from the EEA, the UK, or Switzerland, we rely on the transfer mechanisms in our Data Processing Addendum. Each provider publishes where it stores data and how it protects it.
Changes to this list
We update this page when adding or replacing a subprocessor that handles customer personal data. Customers may write to hello@bosque.cc to request change notices. As the Data Processing Addendum explains, notice is provided in advance where reasonably practicable and customers must raise any data-protection objection promptly.
Questions
Email hello@bosque.cc.