1. Overview

Subprocessors are third parties that process personal data to help Thorbis provide the Service. Each subprocessor is bound by confidentiality and data-protection obligations consistent with our Data Processing Addendum (/legal/dpa).

The Service is primarily hosted in the United States. This page lists the providers we use, what each one processes, and how we tell you when the list changes.

2. Core subprocessors

These providers are core to operating the Service and process data for all accounts:

Subprocessor	Purpose	What it processes
Supabase	Database & authentication hosting	Customer Data and account/authentication data.
Stripe	Payment processing, billing & payouts	Payment, subscription, and payout transaction data.
Vercel	Application hosting & delivery	Application requests and operational logs.
Vercel AI Gateway	AI model access	Prompts and context submitted to AI features.
Telnyx	Telephony (voice & SMS)	Phone numbers, message content, and call metadata.
Resend	Transactional email delivery	Outbound email content and recipient addresses.
Sentry	Error & performance monitoring	Diagnostic, error, and performance data.
Plaid	Bank account verification (where enabled)	Bank-link tokens and limited account metadata.
Google (Maps, Geocoding, Sign-in)	Mapping & authentication	Service addresses, location data, and sign-in profile data.
Upstash	Background queueing & rate limiting	Job and rate-limit metadata.
Vercel BotID	Bot & abuse detection	Request metadata used to detect automated abuse.

3. Feature-specific providers

These providers are not active for every account

The providers below process data only if you enable the related feature. If you never turn on the corresponding feature, the provider does not process data for your account, and you should not assume any of them is in use just because it appears on this list.

Provider	Feature (only if you enable it)
Financing lenders (such as Affirm, Klarna, or Wisetack)	Consumer financing at checkout (where available).
Address, property, and permit data providers	Optional record enrichment (where enabled).
Transcription providers	Optional call or voicemail transcription (where available).

Depending on the integrations a Customer connects, other providers chosen by the Customer may also process data under the Customer's own arrangements with them.

4. Changes & notice

We maintain this page as the current list of subprocessors and will provide reasonable notice of material new subprocessors so Customers can review them. See the Data Processing Addendum (/legal/dpa) for objection rights.

5. Contact

Questions about our subprocessors or your data: privacy@thorbis.com.

Operating map

Translate the policy into an operational review

Legal pages should help buyers and administrators understand which workflow, approval, and retained record the document supports.

Workflow touched

Identify the product behavior this document governs before reviewing individual clauses.

Decision owner

Name who approves the workflow, exception, vendor review, or customer-facing disclosure.

Record to keep

Store the accepted version, review date, question trail, and any follow-up action in one place.

Review workflow

Use the document as an operating reference, not just a legal archive

Read the scope

Start with the document purpose, effective date, and category before reviewing the clauses.

Check the operating impact

Map the terms to the workflow they affect: data, payments, AI, messaging, content, or platform use.

Route questions

Send contract, privacy, security, abuse, DMCA, or support questions to the right inbox.

Request routing

Send the right question to the right Thorbis inbox

Legal noticeslegal@thorbis.com Privacy requestsprivacy@thorbis.com Security reviewsecurity@thorbis.com Platform abuseabuse@thorbis.com

Same category

Related privacy & data documents

Privacy PolicyWhat personal data we collect (yours, your customers', your employees'), why, who we share it with, how long we keep it, and the choices you have.Your Privacy Rights (GDPR & CCPA/CPRA)State- and region-specific rights, how to submit a request, authorized agents, non-discrimination, and our commitment that we do not sell personal information.Data Processing AddendumThe controller/processor terms that apply when Thorbis processes personal data on your behalf, including Standard Contractual Clauses and breach notification.Cookie PolicyThe cookies and similar technologies we use, what they do, and how to control them.