Customer Content processing
Last updated: September 19, 2026.
SwiftTrail Data Solutions Ltd (Company No. C2026091700015), a Trinidad and Tobago company trading as SwiftTrail, uses the providers below to process Customer Content for its PDF extraction Service. Customer Content includes uploaded documents, necessary extraction inputs and generated results. The Data Processing Addendum at useswifttrail.com/legal/dpa governs this processing and SwiftTrail's responsibility for Subprocessors.
| Provider | Function and information processed | Location information |
|---|---|---|
| Anthropic PBC | Commercial API extraction of documents; receives necessary document text or files, instructions and generated output. | API storage is described by Anthropic as US-based. By default, Anthropic's commercial API uses a “global” inference routing configuration, meaning a request may be processed on infrastructure outside the United States; a customer can instead configure inference to remain US-only, at an additional cost under Anthropic's pricing. SwiftTrail currently uses Anthropic's default global routing and has not enabled the US-only inference configuration. Authorized support or safety access may also occur in other countries. See any agreed account routing configuration. |
| Neon Inc. | Managed database for Customer Content fields, extraction results and associated records, with backup and recovery services. | SwiftTrail production database region: AWS US East 2 (Ohio). Provider support and downstream infrastructure locations are governed by the applicable Neon terms and disclosures. |
| Railway Corp. | Application hosting and execution of upload, extraction and result-delivery workflows; may handle documents, temporary files, outputs and associated operational records. | SwiftTrail application and persistent-storage region: US East (Virginia, USA). Provider support and downstream infrastructure locations are governed by Railway's terms and disclosures. |
SwiftTrail personnel may provide authorized administration, support and security assistance from Trinidad and Tobago. These personnel are part of SwiftTrail's processing operation, rather than a separate company in this list. None of these disclosures guarantees that all processing or access remains within the United States.
SwiftTrail uses the commercial API with model-training opt-in disabled and does not submit Customer Content through optional training or feedback programs. Anthropic's ordinary API input/output retention is up to 30 days from receipt or generation. Legal and safety or misuse exceptions can extend retention; Anthropic currently describes retention of flagged content for up to two years and associated classification scores for up to seven years. This is not a zero-retention service. SwiftTrail reviews model and feature changes before enabling them.
Provider information: Anthropic DPA, API retention, model training and processing locations.
Neon information: Neon DPA. Railway information: Railway DPA. These provider documents describe their services; they do not replace SwiftTrail's obligations to Customer.
Paddle.com Inc. handles the purchase, invoicing, payments and applicable transaction taxes as Merchant of Record. Paddle may process billing contacts, transaction details and subscription records, but SwiftTrail does not send any documents, for example; uploaded leases, rent rolls or extraction results to Paddle. Paddle is therefore not listed as a Subprocessor for Customer Content. Its billing-data role is described in the Privacy Notice and the applicable Paddle agreements.
Cloudflare provides authoritative DNS. In that DNS-only role it does not receive Customer Content through SwiftTrail's application. Cloudflare's DNS role may involve DNS-related technical data; it does not mean Cloudflare receives no data at all. Any future use of proxy, CDN, WAF, Turnstile or other traffic-handling services will be assessed and the relevant disclosures updated before activation.
SwiftTrail will maintain this list and notify the account administrator by email at least 30 days before a new or replacement Customer Content Subprocessor begins processing, as set out in the DPA. Customers may object on reasonable data-protection grounds by emailing [email protected] within that period. The DPA explains resolution and termination rights. Posting a change on this page does not replace required individual notice.