Draft — these documents are being finalized and have not yet been reviewed by a lawyer.
Sub-processors
Last updated: October 12, 2026
We use the service providers below to operate Owncroft. Each processes data on our behalf and is bound to protect it and to use it only to provide its service to us. We will update this page before adding a new sub-processor that handles your data.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic | AI reading of documents (OCR) and category suggestions | The documents and text you submit to AI features (receipts, invoices, bank statements), which may contain personal and financial data. Commercial service; not used to train models. | United States |
| Stripe | Payment processing and subscription billing | Payment and billing details. Card numbers are handled by Stripe; we do not store them. | United States |
| Resend | Transactional and notification email | Recipient email address and the contents of the messages we send. | United States |
| Plaid | Connecting bank and credit-card accounts (optional) | Account name, last four digits, account type, balances, and posted transactions for the accounts an owner connects. Bank credentials are entered with Plaid and never reach us. | United States |
| Railway | Application hosting and primary database | All application data, hosted and stored to run the Service. | United States |
| Cloudflare R2 | Off-site database backups and file storage | Encrypted database backups and the files you upload. | United States |
| Neon | Development database (test data only) | No production customer data; development fixtures only. | United States |
Questions about our sub-processors: [contact-email].