Every provider that can receive customer or firm data through EstateDraft: what it does, what reaches it, when it is used, and whether it is connected today.
Last reviewed:
How to read this list
When it is used
Always on
The platform runs on it; every request reaches it.
Law-firm work only
Used only for a law firm's work — never for the self-help lane.
On a connection
Reaches data only after a firm or a trustee connects their own account to it.
Once armed
Would carry the platform's own payments, notices or upload checks once the platform's owner sets it up.
Today
Connected
Data reaches it today.
Not connected
No credential for it is set in production, so no data reaches it.
Loaded on use
A page loads it from the provider when someone opens that page; no credential is involved.
The providers
Supabase
When it is used: Always onToday: Connected
What it does
The database, sign-in and private file storage — the system of record, hosted in the United States.
What reaches it
Every stored record — accounts, matters, answers, uploaded documents and the audit log — and the email address each sign-in link is sent to.
Vercel
When it is used: Always onToday: Connected
What it does
Hosting, the server functions, the scheduled jobs, and the analytics and speed scripts on the pages it serves.
What reaches it
Every request and response in transit, request metadata, and the page views and performance timings those scripts report.
Anthropic
When it is used: Law-firm work onlyToday: Not connected
What it does
The AI model behind a law firm's workspace, reached only through the platform's one gateway, which admits only an exact list of Opus models.
What reaches it
Nothing today — no key is set. Once connected: what a firm's workspace sends it — a matter's documents, facts and questions, and the step, firm name and phone number in an overdue reminder to a firm's client — the verbatim text of a public statute the first time its plain-language summary is made, and the model's reply; never a self-help reader's documents.
Stripe
When it is used: Once armedToday: Not connected
What it does
A hosted checkout page — one of the two payment processors written into the code; neither is chosen yet.
What reaches it
Nothing today — no key is set. Once connected: the buyer's email address, the item's name and price, the order's reference identifiers (its matter, firm or account, plan and consent record), what the buyer enters on Stripe's own checkout page, and Stripe's signed payment notices back.
Square
When it is used: Once armedToday: Not connected
What it does
A hosted payment link — the other payment processor written into the code; neither is chosen yet.
What reaches it
Nothing today — no key is set. Once connected: the buyer's email address, the item's name and price, the order's reference identifiers (its matter, firm or account, plan and consent record), what the buyer enters on Square's own payment page, and Square's signed payment notices back.
Resend
When it is used: Once armedToday: Not connected
What it does
Email: deadline reminders, a firm's invitations to its clients and its weekly briefing, purchase receipts, alerts to a firm, and messages to the platform's operators; one of the two email senders written into the code.
What reaches it
Nothing today — no key is set. Once connected: each recipient's email address and the message sent.
Postmark
When it is used: Once armedToday: Not connected
What it does
The other email sender written into the code, for the same messages.
What reaches it
Nothing today — no key is set. Once connected: each recipient's email address and the message sent.
Twilio
When it is used: Once armedToday: Not connected
What it does
Text-message notices — deadline reminders and alerts.
What reaches it
Nothing today — no sender is set. Once connected: each recipient's phone number and the message sent.
Clio
When it is used: On a connectionToday: Not connected
What it does
Practice management: a law firm can push a matter into its own Clio account as a contact, a matter and a note.
What reaches it
Nothing today — the platform's Clio app is not set up. Once a firm connects its own account: the client's name and email address, the trust's and the decedent's names, and a note with the matter's reference, county and date of death.
Google
When it is used: On a connectionToday: Not connected
What it does
Puts a matter's deadlines into a law firm's own connected Google calendar.
What reaches it
Nothing today — the platform's Google app is not set up. Once a firm connects its own calendar: each deadline's date and title (the trust's name and the step's name) and the statute it cites.
Microsoft 365
When it is used: On a connectionToday: Not connected
What it does
Puts a matter's deadlines into a law firm's own connected Microsoft 365 calendar.
What reaches it
Nothing today — the platform's Microsoft app is not set up. Once a firm connects its own calendar: each deadline's date and title (the trust's name and the step's name) and the statute it cites.
DocuSign
When it is used: Law-firm work onlyToday: Not connected
What it does
Electronic signature: a law firm's staff can send a document out for signature.
What reaches it
Nothing today — no account is set. Once connected: the document sent and its name, each signer's name and email address, and the envelope's status back.
Plaid
When it is used: On a connectionToday: Not connected
What it does
Read-only bank account information for a trust administration, once the firm or the trustee links an account.
What reaches it
Nothing today — no keys are set. Once someone links an account: their bank sign-in, entered in Plaid's own window, an identifier for the person linking, and the linked accounts' balances and transactions back.
Free Law Project (CourtListener)
When it is used: Law-firm work onlyToday: Not connected
What it does
Checks that a cited case exists — for the case citations in a law firm's research answers.
What reaches it
Nothing today — no token is set. Once connected: each case citation being checked — never a matter's documents.
LexisNexis
When it is used: Law-firm work onlyToday: Not connected
What it does
Citator treatment (Shepard's) of a cited case — for the case citations in a law firm's research answers.
What reaches it
Nothing today — no key is set. Once connected: each case citation being checked.
Thomson Reuters (Westlaw)
When it is used: Law-firm work onlyToday: Not connected
What it does
Citator treatment (KeyCite) of a cited case — for the case citations in a law firm's research answers.
What reaches it
Nothing today — no key is set. Once connected: each case citation being checked.
Cloudflare Turnstile
When it is used: Once armedToday: Not connected
What it does
The bot check on a firm's public consultation form — Cloudflare Turnstile — that tells a person's browser from an automated one.
What reaches it
Nothing today — no key is set. Once connected: the browser's request for the widget — its network address and browser details — only when a firm's consultation form is opened; never the form's answers.
An upload scanner (not chosen yet)
When it is used: Once armedToday: Not connected
What it does
An outside malware check on each uploaded file, once the platform's owner chooses and connects one.
What reaches it
Nothing today — no scanner is set. Once connected: the bytes of each uploaded file.
Microsoft Office
When it is used: Law-firm work onlyToday: Loaded on use
What it does
The Office JavaScript library that the Word and Outlook add-in pages load from Microsoft.
What reaches it
The browser's request for the library — its network address and browser details — only when an add-in page is opened: the Word and Outlook add-ins a firm's staff run inside Office.
The AI provider
Which AI provider can see a law firm's text is fixed in code: every model call passes through the platform's one gateway, which admits only an exact list of Anthropic's Opus models. The self-help lane has no model at all — its documents are assembled from the reader's own answers and never sent to an AI provider.
No account with the AI provider and no accepted terms are recorded yet, so this page makes no statement about what the provider would keep. The platform's spend ledger records each model call's metadata (such as the surface, the model, the token counts and the cost), never its text.
Data-processing terms
No executed data-processing terms with these providers are recorded yet; this page names who can receive data, not a contract with each provider.