We use a small set of third-party services to deliver the product. Each is a "subprocessor" — a vendor that may handle some of your data on our behalf.
Active subprocessors
- Stripe — payment processing and billing portal. Handles card data and invoices. We do not store card numbers.
- Resend — transactional email delivery (audit-ready alerts, monitoring notifications, account communication).
- Anthropic — AI infrastructure for the chat widgets and report generation. Customer chat messages are sent for processing; no persistent storage on Anthropic's side beyond their standard logs.
- Railway — application hosting and managed database. Customer data lives here.
- Cloudflare — CDN and DDoS protection.
Optional, only if you use them
- Microsoft — only if you connect a Microsoft 365 mailbox for BEC audit.
- Google — only if you connect a Google Workspace mailbox for BEC audit.
Full list and status
See our Trust Centre for the current list, status of each, and the data category each subprocessor handles.