Effective 1 October 2026. We will notify customers 30 days before adding a sub-processor. Regions shown are where processing for a given cell occurs.
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Application hosting and edge network | Regional cell (Sydney, Singapore, London, Frankfurt, US East) |
| Supabase Inc. | Database, authentication, file storage | Regional cell |
| Amazon Web Services | Underlying infrastructure for the above; OCR (Textract) | Regional cell |
| Anthropic PBC | AI-assisted document extraction (no training on customer data) | [Regional endpoint where available; otherwise United States] |
| Stripe, Inc. | Subscription billing, payments, tax | Global (United States, Ireland) |
Integrations you connect yourself (accounting systems, e-signature, identity providers, calendars, BI tools) are independent controllers or processors under your own agreements with them.