Authorized Sub-Processors

Third-party services that process data on behalf of Sergio and our customers

Last Updated: February 6, 2026

This page lists all third-party sub-processors engaged by Sergio to process personal data on behalf of our customers. All sub-processors have signed Data Processing Agreements (DPAs) with protections equivalent to those in our own DPA.

We provide 30 days written notice before adding new sub-processors. Customers may object if a new sub-processor presents material privacy risks to their data.

Essential Infrastructure

Core services required for platform operation. These sub-processors are always active.

Sub-Processor	Service	Data Processed	Data Location	DPA Status
Supabase	Database, Authentication, File Storage	All customer data, user credentials, uploaded files	Canada (Montreal)	Signed
Stripe	Payment Processing, Subscriptions, Connect Payouts	Billing information, payment methods, transaction history	United States	Signed
Cloudflare	CDN, DNS, DDoS Protection, Email Routing	Web traffic data, DNS records	Global (edge network)	Signed
hCaptcha (Intuition Machines, Inc.)	Bot Protection, CAPTCHA Verification	IP address, browser metadata, interaction patterns	United States	Signed

Feature-Specific Services

Services activated when customers use specific platform features.

Sub-Processor	Service	Data Processed	Data Location	DPA Status
Mapbox	Mapping, Geocoding, Navigation	Addresses, GPS coordinates, route data	United States	Signed
Resend	Transactional & Inbound Email	Email addresses, email content, delivery status	United States	Signed
Telnyx	VoIP Calling, SMS, Phone Numbers	Phone numbers, SMS content, call recordings, voicemail	United States	Signed
Anthropic	AI/ML Inference (Claude)	Chat queries, support requests, image analysis input	United States	Signed
Sentry (Functional Technology, Inc.)	Error Monitoring, Session Replay	IP address, browser metadata, session recordings (10% sample rate)	United States	Signed
Nylas	Email & Calendar Integration	Email metadata, calendar events, OAuth tokens	United States	Signed
Google Firebase	Push Notifications (Android)	Device tokens, notification content	United States	Signed

Optional Integrations

Services only activated when customers explicitly enable an integration.

Sub-Processor	Service	Data Processed	Data Location	DPA Status
QuickBooks (Intuit)	Accounting Sync	Invoices, customer records, financial transactions	United States	Signed
Plaid	Bank Account Aggregation	Bank account info, transaction history, balances	United States	Requested
Zapier	Workflow Automation Webhooks	Customer data, job data, invoices (per user configuration)	United States	Signed
Wave	Accounting Sync	Invoices, customer records, financial transactions	United States	Signed

Development Acceleration

Services used to accelerate platform development and code quality.

Sub-Processor	Service	Data Processed	Data Location	DPA Status
OpenAI	AI-Powered Development Acceleration (Codex)	Code context, development queries, codebase analysis	United States	Signed

View our full Data Processing Agreement View our Privacy Policy

For questions about our sub-processors or to request copies of sub-processor DPAs, contact our Privacy Officer at [email protected]