Sub-processors
Last updated: 28 September 2026
1. Current sub-processors
These are the third parties that may process personal data when we provide Invoicer. Your data itself is stored in Ireland (AWS eu-west-1).
| Sub-processor | What it does | Where |
|---|---|---|
| Supabase | Database hosting, user authentication and file storage | Ireland (AWS eu-west-1) |
| Vercel | Application hosting | Server functions in Dublin, Ireland (dub1), with a global edge network |
| Stripe | Invoicer subscription billing; card and SEPA Direct Debit collection for your own invoices (on your own connected Stripe account, where you have connected one) | Ireland and the United States |
| Resend | Sending account, invoice and notification emails | European Union (eu-west-1) and the United States |
| Anthropic | AI reading of custom contracts you choose to upload for scanning, used only for that feature | United States |
| Companies Registration Office (CRO) Ireland | Company lookups when you add a client, through the CRO open services | Ireland |
| European Commission VIES | VAT number validation | European Union |
- Anthropic only receives a contract when you upload one of your own contracts for scanning. Nothing else in Invoicer is sent to it.
- Stripe processes payments to you on your own connected Stripe account, where you have connected one; for those payments Stripe also acts under its own agreement with you.
- The CRO and VIES are public registers. We send them only the company name, number or VAT number being looked up.
2. How we tell you about changes
Before we add or replace a sub-processor that handles customer personal data, we will email account owners at least 30 days in advance and update this page. You may object within that period, as set out in our Data Processing Agreement.
3. Questions
Ask us at info@oxus.ie. See also our Privacy Policy.