Sub-processors
We engage the third parties listed below to provide parts of the Company Financial Statements service. We give Customers at least 30 days' notice before adding or replacing any sub-processor that processes personal data, by email and via an in-app banner.
Last updated 2026-07-26
Google Cloud Platform
DPACompute (Cloud Run), database (Cloud SQL), object storage (GCS), logging.
Location: Deployment-dependent; operational logs may be processed outside India.
Supabase
DPAManaged PostgreSQL database for customer and engagement data.
Location: United States (current project: US East).
Vercel and Vercel Blob
DPAWeb application hosting, content delivery, and configured object storage.
Location: Global edge network; control-plane and storage processing may occur in the United States.
Razorpay / Stripe
DPASubscription billing and tax invoice processing; the configured provider is used.
Location: India and/or United States according to the configured provider.
Resend
DPATransactional email — verification, invitations, FS-share, billing alerts.
Location: United States.
Sentry
DPAApplication error tracking with stack traces.
Location: United States. Self-hosted alternative planned post-pilot.
PostHog
DPAProduct analytics and feature usage measurement.
Location: United States for the configured cloud endpoint.
Notification of changes
Request change notices at subprocessors-notice@companyfs.com. We will use that address for the 30-day notice after confirming your request.