Legal · Privacy

Subprocessors

Thorbis relies on a small set of trusted third-party providers to run the platform. This page lists the core providers we use for every account, the providers that apply only when you enable a specific feature, and how we notify you when the list changes.

Effective June 23, 2026Updated June 23, 2026v1.0

This document is provided for transparency and does not constitute legal advice. It describes how Thorbis operates; your use of the platform is governed by the agreement you accept.

1. Overview

Subprocessors are third parties that process personal data to help Thorbis provide the Service. Each subprocessor is bound by confidentiality and data-protection obligations consistent with our Data Processing Addendum (/legal/dpa).

The Service is primarily hosted in the United States. This page lists the providers we use, what each one processes, and how we tell you when the list changes.

2. Core subprocessors

These providers are core to operating the Service and process data for all accounts:

Subprocessor	Purpose	What it processes
Supabase	Database & authentication hosting	Customer Data and account/authentication data.
Stripe	Payment processing, billing & payouts	Payment, subscription, and payout transaction data.
Vercel	Application hosting & delivery	Application requests and operational logs.
Vercel AI Gateway	AI model access	Prompts and context submitted to AI features.
Telnyx	Telephony (voice & SMS)	Phone numbers, message content, and call metadata.
Resend	Transactional email delivery	Outbound email content and recipient addresses.
Sentry	Error & performance monitoring	Diagnostic, error, and performance data.
Plaid	Bank account verification (where enabled)	Bank-link tokens and limited account metadata.
Google (Maps, Geocoding, Sign-in)	Mapping & authentication	Service addresses, location data, and sign-in profile data.
Upstash	Background queueing & rate limiting	Job and rate-limit metadata.
Vercel BotID	Bot & abuse detection	Request metadata used to detect automated abuse.

3. Feature-specific providers

These providers are not active for every account

The providers below process data only if you enable the related feature. If you never turn on the corresponding feature, the provider does not process data for your account, and you should not assume any of them is in use just because it appears on this list.

Provider	Feature (only if you enable it)
Financing lenders (such as Affirm, Klarna, or Wisetack)	Consumer financing at checkout (where available).
Address, property, and permit data providers	Optional record enrichment (where enabled).
Transcription providers	Optional call or voicemail transcription (where available).

Depending on the integrations a Customer connects, other providers chosen by the Customer may also process data under the Customer's own arrangements with them.

4. Changes & notice

We maintain this page as the current list of subprocessors and will provide reasonable notice of material new subprocessors so Customers can review them. See the Data Processing Addendum (/legal/dpa) for objection rights.

5. Contact

Questions about our subprocessors or your data: privacy@thorbis.com.