Legal
Subprocessor List
Third parties that may process customer data on our behalf, why, and where.
Version 1.0 · Last updated 13 July 2026
Pending legal review: Regions marked here reflect the current deployment and must be re-verified whenever infrastructure changes. Cross-border transfer paperwork for Vietnam (Law 91/2025) is being confirmed with counsel per provider.
Core platform
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Render | Application hosting, managed PostgreSQL & Redis | All workspace data at rest | Singapore region |
| Vercel | Web application delivery (frontend) | No workspace data at rest; serves the browser app | Global edge |
| Microsoft (Entra ID) | Single sign-on identity provider | Sign-in identity (name, email, tenant/object IDs) | Customer's Microsoft tenant region |
| OpenAI | AI document extraction, matching assistance, copilot | Invoice/PO document content submitted for extraction | United States (API) |
| Cloudflare R2 / AWS S3 (configurable) | Document & export object storage; WORM audit anchors | Uploaded documents (encrypted), export archives | APAC region per deployment |
Optional / tenant-configured
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Sentry | Error monitoring (when enabled) | Error traces; scrubbed of document contents | United States / EU |
| Zalo (VNG) | Approval notifications via Zalo OA (tenant opt-in) | Approver name, invoice reference in messages | Vietnam |
| SMTP provider | Email notifications & approvals (tenant-configured) | Recipient address, notification content | Per configured provider |
Not subprocessors
- Vietnam GDT tax portal and your ERP (Dynamics 365, MISA, FAST, Bravo, SAP): data flows to them at your direction as integrations you configure — they process for you, not for us.
- Your bank gateway: payment instructions go where your treasury configuration points them.
Changes to this list
We update this page before engaging a new subprocessor that handles customer data. Enterprise customers can subscribe to change notifications in their DPA. Each engagement requires a data-processing agreement and a security review proportionate to the data involved.