Sub-processors
These are the companies that process data on our behalf so that Kvitta can run. Each one is bound by a written agreement no weaker than our agreement with you. We will tell you by email before adding or replacing one, so you have time to object.
| Provider | What it does | Data it touches | Location |
|---|---|---|---|
| Vercel Inc. | Hosting the application, and file storage | Uploaded files, match results, account data | EU, Frankfurt (fra1) |
| Neon Inc. | The database: accounts, organisations, batches, audit trail | Account data, audit trail, batch decisions | EU, Frankfurt (eu-central-1) |
| Anthropic PBC | Drafting proposed matching rules and explaining failures | Samples of file structure and reference formats | United States. No training on submitted data. |
| Google LLC | Reading a ledger or bank transactions from BigQuery, where the customer uses one | Ledger extracts and bank transactions | The region of the customer's own BigQuery dataset |
| Microsoft Ireland Operations Ltd | Sign in with a Microsoft work account | Name and email address | EU |
| Postmark (ActiveCampaign LLC) | Receiving settlement files sent in by email | Whatever the inbound message contains | United States |
Location
The application, the database and uploaded files are hosted in Frankfurt. Anthropic and Postmark process data in the United States, and those transfers rely on the European Commission's standard contractual clauses.