Who processes your data to run Poppelo.
Every third party that receives customer data, what it receives, and where it processes it. Last updated September 23, 2026. Customers on a data processing agreement are told before a row is added or replaced.
| Subprocessor | Service | Data processed | Region | Terms |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure: object storage for documents and exports, secrets management, message queues | Order documents, extracted order data, exports, audit exports | United States (us-east-1) | AWS GDPR Data Processing Addendum |
| Railway Corp. | Application hosting for the API and workers, managed PostgreSQL and Redis | All customer data at rest and in transit: account data, extracted orders, audit log, queue messages | United States | Railway DPA |
| Vercel Inc. | Hosting for the web application and its server-side sign-in | Account and session data, page requests, and the database connection the sign-in flow uses | United States (confirm region) | Vercel DPA |
| Anthropic, PBC | Reading documents (the Claude API) | The contents of each submitted document, which can include buyer names and addresses, plus your own reference data for that document | United States | Anthropic Commercial Terms and DPA; zero data retention to be confirmed on our account |
| Google LLC | Gmail mailbox intake and Google sign-in, when a customer connects them | Mail in the connected mailbox that the intake reads; the signing-in user's verified email and name | Per Google's terms (confirm region) | Google Workspace and Google Cloud data processing terms |
| Microsoft Corporation | Microsoft 365 mailbox intake and Microsoft sign-in, when a customer connects them | Mail in the connected mailbox that the intake reads; the signing-in user's verified email and name | Per Microsoft's terms (confirm region) | Microsoft Products and Services DPA |
| Transactional email provider (SMTP) | Magic-link sign-in mail, order notifications and acknowledgements | Recipient addresses, sign-in links, order summaries in notification mail | Confirm provider and region | Provider DPA (to be named once the production provider is fixed) |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact and subscription and usage metadata; card data goes to Stripe directly and never touches Poppelo | United States | Stripe DPA |
| Functional Software, Inc. (Sentry) | Error monitoring for the API, workers and, with consent, the browser app | Error reports with internal tenant, user and API-key identifiers; free text is scrubbed of emails, query strings and credential-shaped values before it leaves our servers; document contents are not intentionally included | United States (confirm region) | Sentry DPA |
About the rows marked “confirm”
A region marked “confirm region” is the one we believe applies but have not yet verified against that provider’s project or account settings. We publish the row rather than leave the provider off the list. The transactional email provider is named the moment the production provider is fixed. Ask for the security packet if a row decides your review.
Changes
Adding or replacing a subprocessor is a material change. Customers on a data processing agreement receive notice under the period in their agreement before it takes effect, at the address on their account. Write to privacy@poppelo.com to be added to the notice list.
Questions about this list
How do I find out before a new subprocessor is added?
If you are on a data processing agreement, we notify you at the address on your account under the notice period your agreement sets, before the change takes effect. Write to the privacy address to be added to that notice list.
What does "confirm region" mean on a row?
It is the region we believe applies but have not yet verified against that provider’s own project or account settings. We publish the row rather than leave the provider off the list, and update it once verified.
Can I get more detail than this page shows?
Yes. Request the security packet and we will walk through any row that decides your review, including the ones still marked to confirm.