Sub-processors
Last updated: 8 September 2026
Who processes data for us
These providers process data on our behalf. Each publishes its own data-processing terms.
- Supabase — database, authentication and private file storage for approved page images. Region: Seoul, South Korea (AWS ap-northeast-2).
- Anthropic — AI extraction of transactions from approved page images and text. Commercial API terms; no training on API data; 30-day default retention.
- Vercel — application hosting and server-side rendering.
- Stripe — subscription billing and hosted checkout. Card details are collected by Stripe, never by us.
- Resend — transactional email (statement-ready notices, contact-form replies).
- PostHog (EU) — product analytics, configured to receive step names and counts only, never statement content.
Planned
- AWS — will host the categorization worker (Lambda) after the planned cutover; not yet in use.
Changes
We will update this page and give existing customers 15 days’ notice before adding a sub-processor that handles approved statement content.