Draft — verify each vendor's actual processing region before publishing.
Last updated [EFFECTIVE_DATE — not set]
These are the service providers that may process data on our behalf. Every one is configured to process in the United States, per our US-only residency commitment.
| Provider | Purpose | Sees estimate content? | Sees your customer's PII? | Region |
|---|---|---|---|---|
| Supabase | Database, authentication, document storage | Yes | Yes (documents at rest) | us-east-1 |
| Vercel | Web application hosting | In transit | In transit | iad1 (US East) |
| Google Cloud Run | Document extraction service (PDF/OCR) | Yes | Yes — this is where redaction happens | US East |
| Anthropic | AI analysis and drafting | Redacted copy only | No | US inference only |
| Inngest | Background job orchestration | Job metadata and references | No | US |
| Postmark | Transactional email and estimate intake by email | Yes, for forwarded estimates | Yes, for forwarded estimates | US |
| Paddle | Payments; merchant of record | No | No | US/EU — billing data only |
| Sentry | Error monitoring | Incidental, in diagnostics | Scrubbed | US |
| Axiom | Application logs | Incidental, in diagnostics | Scrubbed | US |
No insurance carrier, carrier-affiliated entity, or estimating-information provider appears on this list, and none ever will.
Notes
- Anthropic receives only the redacted copy of an estimate. Under Anthropic's commercial terms, API inputs and outputs are not used to train their models.
- Cloud Run is the one place unredacted document content is processed, because redaction itself happens there. Redaction runs before anything leaves that service.
- Postmark handles estimates forwarded to your intake address, which arrive unredacted by definition. Redaction happens on receipt into the pipeline.
- We will update this page before adding a subprocessor that touches estimate content, and notify account holders by email.
Questions: support@suppsmith.com