1.Sub-Processors
Invoice Navigator uses the following sub-processors to provide our services. We maintain Data Processing Agreements (DPAs) with all sub-processors and ensure they meet our security and privacy standards.
| Sub-Processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Supabase | Database and authentication | Account data, validation metadata | EU (Frankfurt) | Yes |
| AWS S3 | File storage | Uploaded invoices (encrypted) | EU (Frankfurt) | Yes |
| Vercel | Website and application hosting | None (static hosting) | EU (Frankfurt) | Yes |
| Stripe | Payment processing | Billing information only | EU | Yes |
| Resend | Transactional email | Email addresses, notification content | US | Yes |
| Anthropic | AI-assisted PDF text extraction | Invoice content (transient). Data not used for training per API Terms of Service. | US | Yes |
| Upstash | Rate limiting and caching | API request metadata (IPs, timestamps) | EU (Frankfurt) | Yes |
| Sentry | Error monitoring | Technical errors only, no PII | EU | Yes |
2.AI Processing Disclosure
Invoice Navigator uses Anthropic's Claude API for:
- PDF text extraction - When PDF Converter is used
- Change classification - Internal automation only (no customer data)
Important:
- Invoice content is processed transiently and NOT stored by Anthropic
- Data is NOT used for model training (per Anthropic's API terms)
- AI processing can be disabled on Enterprise plans
- See our AI Processing Policy for details
3.Changes to Sub-Processors
We notify customers 30 days before adding new sub-processors that process customer data.
To receive notifications about sub-processor changes, subscribe to updates: