Sub-Processors
Last updated: January 9, 2026
Invoice Navigator uses the following sub-processors to provide our services. We maintain Data Processing Agreements (DPAs) with all sub-processors and ensure they meet our security and privacy standards.
| Sub-Processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Supabase | Database and authentication | Account data, validation metadata | EU (Frankfurt) | Yes |
| AWS S3 | File storage | Uploaded invoices (encrypted) | EU (Frankfurt) | Yes |
| Vercel | Website and application hosting | None (static hosting) | EU (Frankfurt) | Yes |
| Stripe | Payment processing | Billing information only | EU | Yes |
| Resend | Transactional email | Email addresses, notification content | US | Yes |
| Anthropic | AI-assisted PDF text extraction | Invoice content (transient) | US | Yes |
| Upstash | Rate limiting and caching | API request metadata (IPs, timestamps) | EU (Frankfurt) | Yes |
| Sentry | Error monitoring | Technical errors only, no PII | EU | Yes |
AI Processing Disclosure
Invoice Navigator uses Anthropic's Claude API for:
- PDF text extraction - When PDF Converter is used
- Change classification - Internal automation only (no customer data)
Important:
- Invoice content is processed transiently and NOT stored by Anthropic
- Data is NOT used for model training (per Anthropic's API terms)
- AI processing can be disabled on Enterprise plans
- See our AI Processing Policy for details
Changes to Sub-Processors
We notify customers 30 days before adding new sub-processors that process customer data.
To receive notifications about sub-processor changes, subscribe to updates: