Sub-processors

Last updated: June 2026

These providers process personal data on our behalf to operate FillOnce. They are bound by confidentiality and data-processing terms. Optional services are only used when you or we enable them in configuration.

• Supabase

  Authentication, Postgres database, row-level security, file storage

  Region: Canada (ca-central-1)

  https://supabase.com

• Vercel

  Application hosting, TLS termination, serverless API routes

  Region: Edge regions per deployment

  https://vercel.com

• Stripe

  Subscription billing and customer portal (when you enable paid plans)

  Region: Stripe infrastructure

  https://stripe.com

• Sentry

  Error monitoring (optional; no vault values in payloads when configured)

  Region: Sentry project region

  https://sentry.io

• Plausible Analytics

  Privacy-first, cookieless page analytics (optional)

  Region: EU

  https://plausible.io

• PostHog

  Cookieless product analytics (feature funnels; event names only, no vault data, no stored device identifier)

  Region: United States

  https://posthog.com

• Resend

  Transactional email (confirmation and support messages; processes your email address)

  Region: United States

  https://resend.com

• Cloudflare Turnstile

  Bot protection on sign-up and login (processes IP address and browser challenge data)

  Region: Global (Cloudflare network)

  https://www.cloudflare.com

• Self-hosted extraction service (optional)

  OCR / layout on your infrastructure when EXTRACTION_ENGINE_URL is set, document bytes do not go to FillOnce-operated third parties

  Region: Your network

See also Privacy Policy.