RFPMill Subprocessor List

Published at: https://rfpmill.com/subprocessors

Last updated: 2026-09-02

These are the companies we use to run RFPMill that may handle your data. Our Terms of Service

and Privacy Policy refer to this page, and we keep it current.

We give customers at least thirty days notice by email before adding a provider that

receives uploaded documents. If a new provider does not work for you, that is a reason to

cancel and we will refund the unused part of what you have paid.

Providers that receive your uploaded documents

Provider	What it does	What it receives	Where	Trains on your data
Anthropic, PBC	Reads the RFP package and returns the fee build and the conflicts	The cover email text and the PDF attachments of packages you upload	United States	No. Data sent through the commercial API is not used to train models.
Amazon Web Services, Inc.	Hosts the Service, stores the database and the uploaded files	Everything in your account	United States, region us-east-2	No. AWS does not read stored content.

Provider	What it does	What it receives	Where
Stripe, Inc.	Takes payment and holds the card	Your name, email, billing address, card details, payment history	United States
Twilio SendGrid	Sends your sign-in link and service notices	Your email address and the message	United States
Amazon Simple Email Service	Receives mail sent to rfpmill.com addresses	Messages you send us	United States, region us-east-2
Cloudflare, Inc.	Checks that a person, not a script, is filling in the signup form	Your IP address and browser signals, on the signup page only, before you have an account	United States company, global network

Stated plainly, because customers ask:

No advertising or analytics platform. No Google Analytics, no tracking pixel, no ad network.
No customer data warehouse and no marketing automation tool.
No offshore support contractor. Support is answered by Flow Solutions Group LLC.
No provider outside the United States holds your account data or your documents. Every company

above is United States incorporated. The one qualification is Cloudflare: the signup form check

runs on a global network, so if you sign up from outside the United States that check may be

answered by a server near you. It happens before you have an account, it sees no document, and

it is the only part of RFPMill that works this way.

The reason RFPMill can read four documents against each other and find the conflict between

them is that an artificial intelligence model reads them. That model is run by Anthropic and

the documents leave our servers to reach it.

If a package you hold carries a confidentiality notice or a distribution restriction that would

not permit that, do not upload it. This is the term in our agreement most likely to matter to

you in practice, and we would rather say it three times than have you find out later.

Date	Change
2026-09-02	Added Cloudflare for the signup form check. Corrected the mail sender: sign-in mail goes through SendGrid, and Amazon SES now only receives inbound mail.
2026-08-22	First published