InvoiceBest logoInvoiceBest
Back to Privacy Policy

Sub-processors

Last updated:

Introduction

This page lists the third-party sub-processors InvoiceBest uses to provide our Services. All sub-processors are bound by written agreements that include data protection obligations substantially similar to those in our Data Processing Addendum.

Notice of Changes: We will provide 30 days' advance notice via email to workspace owners before adding new sub-processors. You may object to a new sub-processor on reasonable data protection grounds by contacting legal@invoicebest.com within the notice period.

Current Sub-processors

Supabase Inc.

Database, Authentication, Storage, Real-time Features

Infrastructure
Location:United States (AWS)
Purpose:Hosts application database, user authentication, file storage, and real-time features
Data processed:All customer data, user account information, invoices, contacts
More info:supabase.com/privacy

Vercel Inc.

Application Hosting, CDN, Edge Functions

Infrastructure
Location:United States (Global CDN)
Purpose:Hosts application code, serves static assets, runs serverless functions
Data processed:Application logs, request metadata, minimal transient data during requests
More info:vercel.com/legal/privacy-policy

Stripe Inc.

Payment Processing, Subscription Management

Payments
Location:United States (with global operations)
Purpose:Processes subscription payments, manages billing, fraud prevention
Data processed:Payment card data, billing information, transaction records
Note:Stripe acts as an independent controller for anti-fraud purposes
More info:stripe.com/privacy

Resend Inc.

Transactional Email Delivery

Communications
Location:United States
Purpose:Delivers transactional emails (invoices, receipts, authentication, notifications)
Data processed:Email addresses, email content, delivery metadata
More info:resend.com/legal/privacy-policy

OpenAI-Compatible AI Providers

AI Assistant Features (Optional)

AI Processing
Location:Varies by provider (typically United States)
Purpose:Powers AI Assistant features when enabled by user
Data processed:User prompts, invoice data, customer information (when using AI features)
Data retention:Zero-retention policy configured; data not used for training
Note:AI features are entirely optional and can be disabled in settings. We may use OpenAI, Anthropic, or other compatible providers.

Data Protection Safeguards

All sub-processors listed above:

  • Are bound by written data processing agreements with InvoiceBest
  • Implement appropriate technical and organizational security measures
  • Are contractually prohibited from using customer data for their own purposes (except Stripe for fraud prevention as an independent controller)
  • Comply with applicable data protection laws including GDPR, UK GDPR, and CCPA
  • Use Standard Contractual Clauses or other approved mechanisms for international data transfers where required

Contact

For questions about our sub-processors or to object to a newly added sub-processor, contact:

Email: legal@invoicebest.com

Last updated: September 29, 2025
This list is subject to change. We will notify workspace owners via email at least 30 days before adding new sub-processors.