Subprocessors
Last updated May 28, 2026 · We notify customers at least 30 days before adding a new subprocessor. To subscribe to updates, email privacy@billslash.app.
| Subprocessor | Purpose | Data Processed | Region | SOC 2 |
|---|---|---|---|---|
| Supabase | Managed Postgres database, authentication, file storage | Account data, bills, transactions, encrypted Plaid tokens | US (us-east-1) | Type II |
| Cloudflare | CDN, DDoS protection, application runtime (Workers) | All HTTP traffic; IP addresses | Global edge | Type II |
| Plaid | Bank account connectivity, transaction retrieval | Account metadata, transactions (read-only) | US | Type II |
| Stripe | Subscription billing and payments | Email, name, billing address, payment method | US | Type II |
| Resend | Transactional and marketing email delivery | Email address, name, message contents | US | Type II |
| Sentry | Error monitoring and alerting | User ID (hashed), stack traces, IP address | US/EU | Type II |
See also our Information Security Policy and Data Processing Addendum.