Version 2 · Effective 2026-08-28
Subprocessors
Placeholder pending counsel-authored text.
The vendor list below is generated from the vendor credential groups present in
the platform's configuration. A build-time guard fails if a credential group is
added, renamed or retired without a matching change to this list, so the list
cannot fall silently out of step with the vendors actually in use.
Current subprocessors
Neon — Managed Postgres hosting for the management database and every tenant database.Cloudflare — Edge network, DNS, static hosting, and R2 object storage for documents, item images, capture blobs, backups and audit archives.Fly.io — Application hosting for the API, which processes customer data in memory.Resend — Transactional email delivery (invitations, password resets, notifications).Stripe — Payment processing for subscription billing.Square — Payment processing for subscription billing (alternative rail).Intuit (QuickBooks Online) — Accounting synchronisation for tenants who connect QuickBooks.Slack — Delivery of operational alerts to the platform operator.Better Stack — Delivery of operational alerts and incident paging to the platform operator.HARVIE (Overwatch) — Product feedback intake and the document store the in-app assistant answers from.SMTP relay (unwired) — Direct SMTP email delivery. Configured but not currently in use; Resend carries all mail.Anthropic — The language model behind the in-app assistant, which receives conversation content.Have I Been Pwned — Breached-password screening when a user chooses or changes a password.FreeTSA — RFC 3161 trusted timestamping of provenance records.This list is maintained in the platform source at internal/subprocessors/registry.go. To question
an entry or report an omission, contact the platform operator.