Subprocessor Register
Last updated 24 September 2026
How to read this register
This register lists the current provider categories that may process Finalizo account data or customer-controlled client data. A provider is used only when the relevant feature is enabled or the provider is needed for core service operation. Exact locations and transfer mechanisms can depend on the production account and configuration.
Current providers
| Provider | Service | Data categories | Location / transfer note |
|---|---|---|---|
| Supabase | PostgreSQL and related database infrastructure | Account, project, client, handover, sign-off, and operational records | Configured region and applicable transfer safeguards |
| Cloudflare | DNS, edge protection, deployment support, and R2 object storage | Requests, security metadata, and encrypted handover files | Cloudflare infrastructure; location depends on service and configuration |
| Coolify / hosting infrastructure | Application runtime and deployment | Application requests and runtime data | Production hosting configuration |
| Stripe | Checkout, subscriptions, invoices, tax, and billing portal | Billing identifiers, subscription, invoice, and payment status | Stripe's applicable regional and transfer safeguards |
| Resend | Transactional and consented email delivery | Email addresses, message content, delivery events | Resend's applicable regional and transfer safeguards |
| OAuth sign-in and optional Gemini AI provider | OAuth account profile data; AI prompts only when the AI feature is used | Google's applicable regional and transfer safeguards | |
| PostHog | Product analytics after browser consent | Consent-gated pseudonymous product events | EU host configured for browser and server analytics |
| Sentry | Essential error monitoring | Technical error, request, and diagnostic data | Sentry's applicable regional and transfer safeguards |
Changes and contact
We may add or replace providers when needed to operate the service. We will update this page for material changes and provide the contact route required by the Data Processing Addendum.
For provider or transfer questions, email privacy@finalizo.com.