Sub-processors · The vendors behind the Service
Three vendors. No analytics SDK.
01 Supabase
Purpose
Postgres database, authentication, file storage.
Data shared
All member data. Statements, scenarios, dispatch history, audit log.
Region
Canada (ca-central-1, Toronto).
Contract
Data Processing Agreement on file. PIPEDA-aligned.
Status
Founding vendor. Active since 2024.
02 Anthropic
Purpose
AI dispatch processing. Bureau correspondent replies.
Data shared
Dispatch prompts and contextual data the visitor explicitly authorises per dispatch.
Region
United States (cross-border transfer disclosed; PIA on file for Quebec residents).
Contract
Zero Data Retention agreement. No model training on Service data.
Status
Founding vendor. Active since 2024.
03 Stripe
Purpose
Payment processing. Plus and Household subscriptions.
Data shared
Email address and tokenised card data. We never see the card number.
Region
United States with Canadian acquiring; PCI-DSS Level 1 attested.
Contract
Standard merchant agreement. SAQ-A self-attestation on our side.
Status
Founding vendor. Active since 2024.
Change policy
We tell you thirty days before we add a vendor.
New sub-processor, change of region, or termination of an existing one: an email to every active subscriber and a dated entry on this page, at least 30 days before the change takes effect. We track no analytics SDK, no session-replay tool, no marketing tag manager on authenticated pages. Three vendors is the floor; we will work hard to keep it from growing.