Companies / Draftable / Subprocessors
Draftable provides document comparison and metadata removal software. It serves law firms and legal teams.
Summarized from its homepage on 4 Nov 2026.
Level 4, 180 Flinders Street, Melbourne, VIC, 3000, AU
Subprocessors of Draftable
Draftable declares 4 subprocessors.
From the company's own list.Read the source
| Subprocessor | Purpose |
|---|---|
| Hosting and processing of customer data; delivery of cloud API services; license validation for self-hosted products | |
| Storage and management of customer and prospect contact records; sales pipeline and communications tracking. | |
| Collection and storage of product telemetry and usage data | |
| Storage and management of customer support interactions; incidental processing of customer data contained in support communications (specific information can be redacted or obfuscated at customer request) |
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “ISO 27001:2022 Certified · SOC 2 Type 2 Audited · GDPR Compliant”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “ISO 27001:2022 Certified · SOC 2 Type 2 Audited · GDPR Compliant”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Draftable lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Draftable's full stack
Every vendor with its source and date, and an alert when Draftable adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call