Sub-processors
Last updated: May 25, 2026
To deliver the Service, QuickBits OÜ engages the third-party providers ("sub-processors") below. Each processes Personal Data on our behalf under a data processing agreement and only as needed for its stated purpose. Where a sub-processor is located outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
Infrastructure & Storage
| Sub-processor | Purpose | Location |
|---|---|---|
| Neon | Database hosting | United States / EU |
| Vercel | Web and application hosting | United States |
| Fly.io | API and realtime hosting | United States |
| Cloudflare R2 | File and document storage | EU |
| Cloudflare | CDN and image optimization | United States |
| Upstash | Cache and session store | EU / United States |
AI Providers
| Sub-processor | Purpose | Location |
|---|---|---|
| OpenAI | Receipt transcription and AI assistant | United States |
| Google (Gemini) | AI models and semantic search embeddings | United States / EU |
Operations & Communications
| Sub-processor | Purpose | Location |
|---|---|---|
| Resend | Transactional and marketing email | United States |
| Trigger.dev | Background job processing | United States |
| Sentry | Error tracking | United States |
| Meta (WhatsApp Business) | Optional notification delivery | United States |
Open-Banking Providers
When you connect a bank account, a licensed account information service provider (GoCardless or Plaid) retrieves your account data. These are regulated providers that act as independent data controllers, not our sub-processors, so they are not listed above. See Section 8 of our Privacy Policy.
Changes
We may update this list as our service evolves. Material changes to sub-processors that handle Personal Data will be reflected here with a new effective date. To be notified of changes in advance, contact [email protected].