Subprocessors

Subprocessors

Last reviewed: May 10, 2026. The third-party services below process Personal Data on EarnDrift's behalf to deliver the Service. We notify customers of changes to this list at least 30 days before they take effect (see the DPA).

Supabase, Inc.
Purpose
Managed Postgres, auth, storage, edge functions
Data category
All customer data (encrypted TINs, payment metadata, contractor profiles)
Region
United States
Stripe, Inc. (incl. Stripe Connect)
Purpose
Payment processing — licensed money transmitter
Data category
Funding-account routing data, contractor bank routing data, payment amounts
Region
United States
Plaid Inc.
Purpose
Bank-account linking and transaction sync
Data category
Bank-account metadata, transaction amounts and merchants
Region
United States
Resend, Inc.
Purpose
Outreach email to accounting professionals (not customer email)
Data category
Business email addresses of invited professionals
Region
United States
Mailgun Technologies, Inc.
Purpose
Email delivery event webhooks
Data category
Email addresses, delivery status
Region
United States
PostHog, Inc.
Purpose
Product analytics
Data category
Pseudonymous usage events, IP-derived location
Region
United States
Google LLC (Analytics & Ads)
Purpose
Website analytics and ad measurement
Data category
Cookies, page views, conversion events
Region
United States
Apollo.io
Purpose
Business contact data for outreach to accounting professionals
Data category
Business names and work email addresses of professionals (no customer data)
Region
United States
Google LLC (Gemini API)
Purpose
AI extraction from uploaded 1099 PDFs (sent via Lovable AI)
Data category
Document contents, which can include full tax IDs, during processing only. Extracted fields are stored; the PDF is discarded
Region
United States
Cloudflare, Inc.
Purpose
DNS, CDN, DDoS protection, prerender
Data category
IP addresses, request metadata
Region
Global edge / United States
Lovable
Purpose
Hosting, managed backend, transactional email (W-9 requests, receipts, alerts) and AI gateway
Data category
All customer data hosted in the backend; email addresses and content; uploaded 1099 PDFs in transit to the AI model
Region
United States

AI processing: Google Gemini API endpoints used by EarnDrift are configured so that uploaded content is not retained beyond processing and is not used to train foundation models. We extract structured data from your uploaded documents; the document file itself is discarded after extraction.

Customer support: EarnDrift uses standard email tooling (Gmail / Google Workspace) for customer support. Personal Data shared with us via support email is governed by Google Workspace's enterprise terms.

Data controller: EarnDrift, 5900 Balcones Drive STE 100, Austin, TX 78731, United States.