Subprocessors

Last updated: 1 September 2026 · Australian construction, trades, and finance AR.

Public register means this page: who processes personal information for Chasyr and roughly where. DPA tracker means we record whether a data-processing addendum is on file (docs/compliance/DPA_REGISTER.md internally). Signed copies pending means we rely on each vendor’s standard terms today; privacy@ has not yet stored a signed addendum for every row. That is a contracts task, not a missing product page.

Processor	Role	Typical location	APP 8 / contract
Supabase	Auth, database, storage, edge functions	Project region (confirm in console; often AU or overseas replicas)	Standard terms — DPA execution tracked by privacy@
Mailgun	Transactional and recovery email	US / EU as configured	Standard terms — DPA execution tracked by privacy@
Intercom	In-app and web support chat (creditor-facing)	US / EU (workspace region)	Standard terms — DPA execution tracked by privacy@
Microsoft Clarity	Session recordings, heatmaps, and product analytics	US / Microsoft regions	Standard terms — DPA execution tracked by privacy@
Twilio	SMS, voice, recordings	US and other Twilio regions	Standard terms — DPA execution tracked by privacy@
Vapi	Voice AI (where enabled)	US (typical)	Standard terms — DPA execution tracked by privacy@
OpenAI	Drafts, extraction, classification	US	Standard terms — DPA execution tracked by privacy@
Cohere	Classification (where configured)	US / other Cohere regions	Standard terms — DPA execution tracked by privacy@
Airwallex	Subscription and usage billing	AU / HK / other Airwallex entities	Standard terms — DPA execution tracked by privacy@

See also the Privacy Policy and Terms of Service.

Subprocessors

Last updated: 1 September 2026 · Australian construction, trades, and finance AR.

Processor

Role

Typical location

APP 8 / contract

Supabase

Auth, database, storage, edge functions

Project region (confirm in console; often AU or overseas replicas)