Data Sub-Processors and Data Residency

Last Updated: August 23, 2026

  1. Purpose of this Page. Eternal Me Corporation ("Company") engages the third parties listed below to help deliver the Products. Each sub-processor is bound by written obligations to protect Personal Information, and Company implements the contractual and other safeguards required by applicable law to provide an appropriate level of protection for Personal Information processed by a sub-processor. Company's Privacy Policy and Data Processing Addendum describe how Company handles Personal Information.
  2. Canadian Data Residency.
    1. For Customers established in Canada, Company stores Platform data at rest in the Amazon Web Services Canada (Central) region, located in Canada. This includes intake records, uploaded documents, and account records.
    2. Data is not replicated or backed up outside Canada, except as set out in the exceptions below.
    3. Exceptions. The following processing takes place outside Canada, and applies to Canadian Customers and End Users:
      1. Cold Storage. Where an End User elects to place information into Cold Storage, that information is encrypted and divided into multiple shares which are distributed across authorized Amazon Web Services data centres, which may be located outside Canada. No individual share can be decrypted or used on its own, and no single storage location holds information from which the underlying content can be reconstructed. Reconstruction occurs only where the End User initiates retrieval. Company does not represent that Cold Storage shares are held only in Canada.
      2. The sub-processors identified in the table below with a processing location outside Canada perform the specific, limited functions described for each.
    4. Company does not represent that no Personal Information is ever processed outside Canada. Company represents that Platform data at rest is stored in Canada and that processing outside Canada is limited to the functions identified on this page.
    5. Company will notify Customer before making a material change to where Platform data is stored at rest.
  3. United States Legal Process. Company and several of its sub-processors are established in the United States. Information held by a United States entity may be subject to lawful access requests by United States courts, law enforcement, and government authorities, including under the Clarifying Lawful Overseas Use of Data Act (CLOUD Act), regardless of where that information is stored. Company will review and, where appropriate and legally permitted, challenge requests it believes to be unlawful or overbroad, and will notify Customer of a request relating to Customer or End User data unless legally prohibited from doing so.
  4. Changes. Company will update this page when a sub-processor is added or removed. Customer may request notification of changes, or object to a new sub-processor, by writing to privacy@eternal.me.
  5. Sub-Processors Engaged by Company.
    Sub-ProcessorPurposeData ProcessedProcessing Location
    Amazon Web Services, Inc.Platform hosting, storage, and background processingAll Customer and End User data stored in the PlatformCanada (Central) for Canadian Customers. Cold Storage shares may be held in Canada, the United States, Ireland, France, Brazil, India, Singapore, Australia and Japan, as described above.
    Anthropic PBCAutomated extraction and summarization of intake informationIntake content submitted by the End UserUnited States
    Plaid Inc.Financial account discovery and asset importFinancial account information provided by the End User, where the End User elects to use this featureUnited States
    Stripe, Inc.Payment card processingBilling contact and payment card informationUnited States
    PostmarkDelivery of invoices, account notices, and intake invitationsRecipient name and email address, and message contentUnited States
    Intuit Inc. (Mailchimp)Marketing email deliveryName and email address of subscribersUnited States
    Google LLCAddress lookup and autocompletePartial address text entered by the userUnited States
    Pipedrive OUCompany sales and enquiry managementContact details submitted through Company enquiry formsEuropean Union
    Slack Technologies, LLCInternal operational notificationsAccount and firm-level events only. Company does not transmit End User names or intake content to this service.United States
    Oneleet, Inc.Security and SOC 2 compliance monitoringCompany system and configuration metadataUnited States
  6. Customer-Directed Integrations. The following are systems operated by third parties that Customer may choose to connect to the Platform. Data is transmitted to these systems only where Customer enables and configures the integration, and Customer's own agreement with the relevant provider governs that processing. Company is not the controller or processor of Personal Information once it is delivered to a Customer-directed system, and Company makes no data residency representation in respect of it.
    IntegrationPurpose
    ClioPractice management
    LawmaticsClient intake and marketing
    MyCasePractice management
    LeapPractice management
    LawcusPractice management
    ActionstepPractice management
    WealthCounselDocument drafting
    ZapierWorkflow automation to Customer-selected applications
  7. Questions. For questions about any sub-processor, or about the jurisdictions in which Personal Information is stored or processed, contact Company's Data Protection Team at privacy@eternal.me, or write to Eternal Me Corporation, 1998 Commerce St #25, Yorktown Heights, NY 10598. This is the contact required by section 13.1 of the Alberta Personal Information Protection Act for questions about the collection or use of Personal Information by a service provider outside Canada.

Powered by WHMCompleteSolution