Sub-processors
These are the vendors CustomsGenius (eCompliance, Inc.) uses to deliver the service, what customer data each one can access, and where processing happens. We add a vendor here and notify workspace owners before it touches unredacted customer data. Last updated: August 1, 2026.
| Vendor | Purpose | Customer data accessed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | All customer data at rest | US (AWS us-east-2) |
| Amazon Web Services, Inc. | Underlying cloud for Supabase | Same as Supabase (infrastructure layer) | US (us-east-2) |
| Vercel Inc. | Application hosting and compute | All application traffic in transit; nothing stored | US (global edge) |
| Cloudflare, Inc. | DNS, WAF, DDoS protection, TLS | All traffic in transit; nothing stored | Global edge |
| Stripe, Inc. | Payments and billing | Billing identity and payment method; never trade data | US/EU |
| Anthropic PBC | AI document extraction and analysis | Uploaded documents and entry data during processing; not retained beyond a short provider window; never used to train models | US |
| Mistral AI SAS | Document OCR | Uploaded PDFs during processing; not staged in any provider file store; never used to train models | France (EU) |
| Resend, Inc. | Transactional email | Email addresses and message content | US |
| Functional Software, Inc. (Sentry) | Error monitoring | Pseudonymous account ID and error context only | US |
| Upstash, Inc. | API rate limiting | Ephemeral request counters | US |
| GitHub, Inc. | Source code and CI | None (no customer data in code) | US |
| Brave Software, Inc. | Web search for optional importer verification | Importer names submitted for screening | US |
Questions about a vendor, or want notice of changes in writing? Email team@customsgenius.com.