Skip to content
Sign in

Subprocessors

Subprocessors

Third parties this service can send personal data to. Accepting each vendor's terms is not recorded on this page. None of these agreements is published as signed on this site.

  • Render

    Hosting, in Oregon.

    Render Services, Inc., 525 Brannan St, San Francisco, CA 94131, United States. The published configuration runs the site, the API, Postgres, and Redis in Oregon. Redis persistence is off. This service has no backup job. Data-processing addendum: https://render.com/dpa (as of 17 October 2026 the addendum page listed last modified 19 December 2024). It describes EU standard contractual clauses for a transfer outside the EEA. Acceptance is not recorded on this page. This page does not claim those clauses have been signed.

  • Mistral AI

    Reading a receipt, only when a key is set.

    Mistral AI, 15 rue des Halles, 75001 Paris, France. Called only when an API key is set, at https://api.eu.mistral.ai, for OCR, chat completions, and speech-to-text. The code refuses api.us.mistral.ai, the global host api.mistral.ai, and the files and agents APIs. Data-processing addendum: https://legal.mistral.ai/terms/data-processing-addendum/. Acceptance is not recorded on this page. Mistral says the addendum is not signed offline. On 17 October 2026 the operator confirmed, from the Mistral admin privacy page, that the switch "use API calls to train Mistral models" is disabled and that Labs models are disabled. That training opt-out is active. Zero Data Retention has not been requested. This page does not treat it as active. Account and billing metadata may be processed outside the EU inference region.

  • European Commission VIES

    VAT-number lookup.

    The public VAT-number lookup at the European Commission. Used when a VAT number is checked and the lookup is not switched off. No signed data-processing agreement is published on this site. Counsel has not classified this lookup on this page.

  • Lithuanian open data

    Lithuanian company-code lookup.

    get.data.gov.lt, for a Lithuanian company code, under the same lookup switch as VIES. No signed data-processing agreement is published on this site. Counsel has not classified this lookup on this page.

Not connected

No analytics vendor, no advertising network, and no payment vendor is connected. Plan and billing status are labels in the database. The contact form stores the name, email, and message as a support ticket.

Mail sending is not configured. In this deployment the one-time deletion code is written to the server log, not to an inbox. A mail host, its country, and its terms are not published on this page.

Have I Been Pwned is not implemented. No password hash is sent to that service.

Checked against the published configuration on 17 October 2026.

Subprocessors · VectorInvoice