TermsroomLegal

Draft, under legal review

These documents are drafts published for reference only. They are with our counsel for review and will change. They are not yet offered as, and should not be relied on as, binding terms. No customer has been asked to accept them and no payment is being taken against them.

We have published them early because a prospective customer’s procurement or privacy team should be able to read our position before we ask for their time. If something here concerns you, tell us. It is easier to change now than later. legal@termsroom.com

Draft 9 August 2026

Sub-processors

Everyone we rely on to run Termsroom. Your documents appear in exactly one row, which is your own Microsoft tenant.

ServiceWhat it doesWhereAttestationHolds documents
VercelApplication hosting and deliveryConfigurable regionSOC 2 Type IINo
SupabaseDatabase, authentication, the negotiation recordCanada (ca-central-1)SOC 2 Type IINo
TwilioPhone verification at sign-inUnited StatesSOC 2 Type II, ISO 27001No
MicrosoftYour own tenant: Entra, Teams, SharePointYour tenant, your regionYour existing agreement with MicrosoftYes, yours

Changes

We will give customers at least 30 days notice before adding a sub-processor, by email and by updating this page. If you object on reasonable grounds we will work with you to find an alternative, and if we cannot you may terminate and receive a refund of the unused portion of your term.

Cross-border processing

Twilio processes phone numbers in the United States for sign-in verification. Everything else in our own stack is processed in Canada. Your documents are processed wherever your own tenant is configured, which is entirely your choice.