Subprocessors
Effective Date: 11-07-2026 (revision 2) · Version 2026-11-07.2
These providers support QuoteChecker.ai. Their access depends on the feature you use. U.S. application storage does not mean that every provider processes information only in the United States. This list describes processing roles; it is not a statement that a business associate agreement or a customer-specific data processing agreement has been executed.
Providers that process your submitted content
When you run an audit, the text of your quote or bill — and content derived from it, such as extracted line items and the generated audit — is processed by the providers below. Email delivery also processes the content of an audit copy or message you ask us to send.
| Provider | Purpose | Data it receives | Region |
|---|---|---|---|
| Supabase (PostgreSQL) | Primary application database and object storage | Account data, audit history, subscriptions, and all stored account-linked records | United States |
| OpenAI | AI analysis of submitted quotes/bills; live web research | Submitted quote/bill text, selected project documents or images, derived audit context, and research queries | Provider-managed locations; an exclusive U.S. processing region is not part of this service |
| Together.ai | Structured data extraction and independent AI scoring for Deep Analysis | Submitted quote/bill text and generated audit text | Provider-managed locations; an exclusive U.S. processing region is not part of this service |
| OCR.space | Image/PDF text extraction (OCR) when the upload feature uses it | The uploaded quote/bill image or PDF | European Union (provider processing) |
| Vercel | Application hosting and serverless compute | All request traffic transits the platform | United States |
Provider processing and retention
Provider terms describe their own processing and available controls: OpenAI API data controls, Together.ai privacy and security, and OCR.space privacy and processing locations. Availability of a provider option does not mean it is included in QuoteChecker. Our Privacy Policy explains provider retention separately from saved product history. Existing customer agreements and rights remain in effect.
Providers that process account, billing, and operational data
These providers handle your account, payments, email, delivery, and platform security. The email provider receives content you ask us to send; identity and payment services receive the account and transaction information described below.
| Provider | Purpose | Data it receives | Region |
|---|---|---|---|
| Clerk | Authentication and account/session management | Email address, authentication tokens, and account identifiers | United States |
| Stripe | Payment processing, subscription billing, and creator payouts | Payment-method details, billing country, email, and subscription state | United States |
| Resend | Transactional and course/notification email delivery | Email address, requested audit copies, and support or notification message content | United States |
| Cloudflare | CDN, DNS, and edge security/DDoS protection | IP address and request metadata transit the edge | Global edge |
| Browser push services (Google, Mozilla, Apple) | Delivering a notification to your device when Pro background work finishes — only if you turn notifications on | The push address your own browser issues, and a payload encrypted end-to-end to your browser's key that the service cannot read. Off by default; turning notifications off deletes the record | Determined by your browser vendor |
| Plausible Analytics | Cookieless, privacy-preserving product analytics | Aggregate page views with no cookies and no personal identifiers | European Union |
Questions about this list? Email contact@quotechecker.ai.