Subprocessors
Last updated 2026-10-06
These are the suppliers that process data on our behalf. Each is bound by a contract to process it only on our instructions. We give at least 30 days notice by email before adding or replacing one, as set out in our data processing agreement.
| Supplier | What it does | Where | Transfer basis |
|---|---|---|---|
| Render Services, Inc. | Application hosting and managed PostgreSQL database | Frankfurt, Germany (EU) | Within the EEA |
| Stripe Payments Europe, Ltd. | Subscription billing, payment processing, tax calculation | Ireland (EU), with processing in the United States | EU Standard Contractual Clauses |
| Resend (Plus Five Five, Inc.) | Transactional and lifecycle email delivery | United States | EU Standard Contractual Clauses |
| Cloudflare, Inc. | DNS, CDN, denial-of-service protection, and storage of uploaded documents (R2) | Global edge network; document storage in the EU (R2 EU jurisdiction) | EU Standard Contractual Clauses |
| Anthropic, PBC | Reading invoices and receipts to extract their fields (AI extraction) | United States | EU Standard Contractual Clauses |
| Google Ireland Ltd. | Website analytics and sign-in with Google, both only where the visitor has consented | Ireland (EU), with processing in the United States | EU Standard Contractual Clauses |
To be told when this list changes, email [email protected] and ask to be added to the notification list.