Legal
Subprocessors
Last updated: 11 August 2026
Closed beta. Invoister is in active development. We may update this document as the product evolves; the "Last updated" date above always reflects the current version, and we will notify you of material changes.
We use a small number of trusted providers ("subprocessors") to run Invoister. Each processes personal data on our behalf under a data-processing agreement. We update this list when it changes.
Current subprocessors
| Provider | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Supabase | Database, authentication, storage | Account, invoices, clients | EU | EU hosting + DPA |
| Vercel | Hosting, content delivery, cookieless page-view analytics | Technical/usage data, IP | US / global | DPA + SCCs |
| Anthropic | AI assistant | AI chat content you send | US | DPA + SCCs — when you supply your own API key, that usage is governed by your agreement with Anthropic rather than ours |
| Resend | Transactional email | Email address, message content | US | DPA + SCCs |
| Lemon Squeezy | Payments (Merchant of Record) | Billing details | US / global | DPA + SCCs — active when Pro launches |
Questions
Email [email protected] for any subprocessor question.