Draft — verify each vendor's actual processing region before publishing.
Last updated 13 October 2026
These are the service providers that may process data on our behalf. Database, application hosting, and document extraction run in the United States. Model requests go to the providers named below. Those requests ask for no training on the content and no prompt logging. They are not a contractual promise that inference runs only in the United States.
| Provider | Purpose | Sees estimate content? | Sees your customer's PII? | Region |
|---|---|---|---|---|
| Supabase | Database, authentication, document storage | Yes | Yes (documents at rest) | us-east-1 |
| Vercel | Web application hosting | In transit | In transit | iad1 (US East) |
| Google Cloud Run | Document extraction service (PDF/OCR) | Yes | Yes — this is where redaction happens | US East |
| OpenRouter | Routes redacted model requests | Redacted copy only | No | Routing layer. data_collection: deny. No host order |
| Mistral | Primary model (Mistral Medium) for analysis and drafting | Redacted copy only | No | Via OpenRouter, on a host that accepts data-collection deny. Not a contractual US-only region |
| Amazon Bedrock | Hosts Amazon Nova Pro when the primary call fails | Redacted copy only | No | Fallback only, via OpenRouter, with data-collection deny. Not a contractual US-only region |
| Inngest | Background job orchestration | Job metadata and references | No | US |
| Resend | Transactional email (audit delivery, lead notices) | Yes, the audit PDF on delivery | Yes, the recipient address and message | US |
| Postmark | Estimate intake by email, and bounce reports, until a later ticket | Yes, for forwarded estimates | Yes, for forwarded estimates | US |
| [PAYMENT_PROVIDER — not set] | Payments; merchant of record | No | No | US/EU — billing data only |
| Sentry | Error monitoring | Incidental, in diagnostics | Scrubbed | US |
| Axiom | Application logs | Incidental, in diagnostics | Scrubbed | US |
No insurance carrier, carrier-affiliated entity, or estimating-information provider appears on this list, and none ever will.
Notes
- OpenRouter receives only the redacted copy, and only to route it. Every request sets data collection to deny, so a provider that stores or trains on the prompt is not eligible. We do not pin a host order and we do not opt in to prompt logging. We do not claim that inference is contractually limited to the United States.
- Mistral receives that redacted copy as the primary model (Mistral Medium). OpenRouter selects a host that accepts data-collection deny. We do not call Mistral except through OpenRouter.
- Amazon Bedrock receives that redacted copy only when the primary call fails and the same request is retried once as Amazon Nova Pro, still with data collection denied. We do not call Amazon except through OpenRouter.
- Cloud Run is the one place unredacted document content is processed, because redaction itself happens there. Redaction runs before anything leaves that service.
- Resend sends the mail we originate: audit delivery (including the PDF) and the internal notice that a lead arrived. It does not receive forwarded estimates.
- Postmark handles estimates forwarded to your intake address, which arrive unredacted by definition. Redaction happens on receipt into the pipeline. Bounce and spam webhooks are still Postmark until a later ticket.
- We update this page, and email account holders at least 10 days before a new sub-processor begins processing estimate content. The notice names the provider, its purpose, whether it sees estimate content, the region, and the date it takes effect. Account holders may object on reasonable data-protection grounds before that date.
Questions: support@suppsmith.com