Companies / SpotDraft / Subprocessors
SpotDraft provides a contract management platform that drafts, reviews, and tracks contracts. It serves in-house legal teams and business teams such as sales, finance, HR, and procurement.
Summarized from its homepage on 4 Nov 2026.
447 Broadway, 2nd Floor, 1410, New York, NY, US+91 8042212884
Subprocessors of SpotDraft
SpotDraft declares 51 subprocessors, including AI providers Anthropic, OpenAI.
| Subprocessor | Purpose |
|---|---|
| Used for OCR extraction and backup | |
| Amplitude is an analytics platform used to understand user behaviour. Note: User names and emails are hashed | |
| It is used to extract key metadata from contracts and allow users to ask questions about a contract. In addition to this, users can use it to review their contracts based on their defined guidelines with the help of LLMs. | |
| It is used to extract key metadata from contracts and allow users to ask questions about a contract. In addition to this, users can use it to review their contracts based on their defined guidelines with the help of LLMs. | |
| To track user actions on our platform and configure smart suggestions to be provided to the users. | |
| We use Chargebee for managing our recurring subscriptions and prepaid credits. | |
| User authentication and management platform for secure access control | |
| We use Cloudflare for CAPTCHAs on our web application. | |
| Win-loss analysis platform for deals | |
| Data connector, which helps in syncing live HubSpot CRM data into Google Sheets for reporting, dashboards, and analysis |
41 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about SpotDraft
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “GDPR HIPAA SpotDraft Support Stack”The company's own statement of compliance. There is no official HIPAA certification or registry. | 11 Nov 2026Source |
| ISO 27001Company's statement | “ISO 27001 SOC 2 Type II GDPR HIPAA”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “SOC 2 Type II GDPR HIPAA SpotDraft Support Stack”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean SpotDraft lacks it.
Recent changes
| Date | Change |
|---|---|
| 11 Nov 2026 | now shows Google Analytics |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See SpotDraft's full stack
Every vendor with its source and date, and an alert when SpotDraft adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call