Legal
Subprocessors
Last updated: 17 October 2026
Closed beta. Invoister is in active development. We may update this document as the product evolves; the "Last updated" date above always reflects the current version, and we will notify you of material changes.
We use a small number of trusted providers ("subprocessors") to run Invoister. Each processes personal data on our behalf under a data-processing agreement. We update this list when it changes.
Current subprocessors
| Provider | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Supabase | Database, authentication, storage | Account, invoices, clients | EU | EU hosting + DPA |
| Vercel | Hosting, content delivery, cookieless page-view analytics | Technical/usage data, IP | US / global | DPA + SCCs |
| Anthropic | AI assistant | AI chat content you send | US | DPA + SCCs — when you supply your own API key, that usage is governed by your agreement with Anthropic rather than ours |
| Resend | Transactional email | Email address, message content | US | DPA + SCCs |
| Microsoft (Clarity) | Session replays and heatmaps — only with your consent; all text masked inside the app | Usage data (clicks, scrolls, device, IP); text and inputs masked | US | DPA + EU–US Data Privacy Framework |
| Lemon Squeezy | Payments and subscriptions (Merchant of Record — an independent controller for the payment itself) | Billing details, email, subscription status | US / global | DPA + SCCs |
| Google (Google Analytics) | Visit and page statistics — only with your consent; advertising features off | Usage data (pages, device, browser, approximate location from IP) | EU / US | DPA + EU–US Data Privacy Framework |
| Sentry (Functional Software, Inc.) | Error monitoring — reports of crashes and failures so we can fix them | Technical data: error, page, browser and device; no account, client or invoice content | EU (Germany) | EU hosting + DPA |
| Cloudflare | Domain name system, network protection and email routing for our own inboxes | Technical data, IP; emails you send to our addresses | US / global | DPA + SCCs |
| komoot (Photon) | City and address suggestions while you type an address | The text you type, IP address | Germany (EU) | EU-based provider |
Questions
Email privacy@invoister.app for any subprocessor question.