Subprocessors
Version 1.0 · Last revised: September 17, 2026
This is the current published list of subprocessors LegalTime, Inc. engages to process customer personal data for LegalTime AI. It matches Appendix 2 of the Data Processing Agreement. Practice-management systems a customer connects (for example Clio Manage or Harvest) are that customer's destinations, not LegalTime subprocessors.
The Data Processing Agreement promises at least fifteen days' written notice before we add or replace a subprocessor. This page is the public list. Its git history is the changelog. Objections go to team@legaltime.ai. After the SOC 2 examination, the same list will also appear on LegalTime's Chiaro verified trust page.
1.Current subprocessors
Amazon Web Services, Inc. (Amazon Bedrock) — United States. Large language model inference for classifying attorney activity and generating structured time entries, including inference over screen images. Customer data is transmitted only through LegalTime's authenticated gateway under zero data retention.
xAI (AIQ Phase LLC) and OpenAI OpCo, LLC — United States. Text-only failover if Amazon Bedrock is unavailable. Screen images stay on Bedrock. Zero data retention is required before either provider is used.
Sentry (Functional Software, Inc.) — United States. Application crash and error telemetry. Sentry does not receive screen content, images, document contents, client or matter names, or derived activity context.
Vercel, Inc. — United States. Application hosting and API infrastructure. Customer data transits Vercel and is not persistently stored there.
Supabase, Inc. — United States. Account authentication and metadata storage (user accounts, firm information, billing metadata). It does not store Customer Data as defined in the Data Processing Agreement.
2.Changes and notice
No subprocessor has been added or replaced since this list was published. When a change is planned, LegalTime will update this page and email the notice to the customer admin address at least fifteen days in advance, as the Data Processing Agreement requires. Customers may object in writing on reasonable data-protection grounds within fifteen days of that notice.
3.Contact
Questions or objections: team@legaltime.ai.