[VERIFY] must be confirmed against each vendor’s current Data Processing Agreement and hosting region before publication.Last Updated: [DATE — set on publish]
IPOReady Inc. engages the third-party sub-processors below to help deliver, secure, and improve our Services. Each is bound by a Data Processing Agreement requiring it to protect personal data consistent with our obligations under GDPR, PIPEDA, and CCPA. We update this page before adding or replacing a sub-processor that processes customer personal data.
| Sub-processor | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Neon | Primary database hosting (PostgreSQL) | All account, company & application data | United States [VERIFY region] | Standard Contractual Clauses [VERIFY] |
| Vercel | Application hosting & file (blob) storage | Usage data, uploaded files, logs | United States [VERIFY] | Standard Contractual Clauses [VERIFY] |
| Amazon Web Services (S3) | Document & file storage | Uploaded documents (cap tables, financials, legal) | [VERIFY AWS region] | Standard Contractual Clauses [VERIFY] |
| Stripe | Payment & subscription processing | Billing details, email, name | United States / Ireland [VERIFY] | SCCs / EU-US Data Privacy Framework [VERIFY] |
| Resend | Transactional email delivery | Email address, name, message content | United States [VERIFY] | Standard Contractual Clauses [VERIFY] |
| Twilio | SMS & WhatsApp messaging | Phone number, message content | United States [VERIFY] | Standard Contractual Clauses [VERIFY] |
| Slack (Salesforce) | Workspace notifications & integration | Name, email, notification content | United States [VERIFY] | SCCs / EU-US Data Privacy Framework [VERIFY] |
| Anthropic | AI document generation & assistance | Content submitted for generation | United States [VERIFY] | Standard Contractual Clauses [VERIFY] |
| OpenAI | AI features | Content submitted for processing | United States [VERIFY] | Standard Contractual Clauses [VERIFY] |
| Google Analytics 4 | Usage analytics (loads only after consent) | Pseudonymized usage data, IP address | United States [VERIFY] | Google EU-US Data Privacy Framework [VERIFY] |
| Sentry / Datadog | Error & performance monitoring | Error logs, IP address, diagnostic data | United States [VERIFY] | Standard Contractual Clauses [VERIFY] |
To be notified of changes to our sub-processors, contact privacy@ipoready.com. Customers with a signed Data Processing Agreement may object to a new sub-processor as set out in that agreement.
See also our Privacy Policy and Data Processing Agreement.