To provide Portfoliq, we rely on a small set of trusted third-party service providers (“subprocessors”) that process data on our behalf. We vet each provider, bind them by contract to protect your data, and share only what a provider needs to perform its function.
The table below lists our current subprocessors, what each receives, and where it primarily operates.
| Provider | Purpose | Data shared | Region |
|---|---|---|---|
| Supabase | Database, authentication, and file storage (primary data store) | All account, portfolio, financial, document, and AI-conversation data | United States |
| Vercel | Application hosting, edge delivery, and cookieless usage analytics | Request metadata and IP addresses | United States (global edge network) |
| Anthropic | AI features — strategy narratives, copilot, and document extraction | Property names, addresses, and financials; contents of documents you upload for extraction | United States |
| Stripe | Payment processing for paid plans | Name, email, phone, company, and billing details. Card data is handled directly by Stripe (PCI-DSS Level 1); we never store full card numbers. | United States |
| Sentry | Application error monitoring and masked session replay | Diagnostic error context. Masked session recordings and user identifiers are captured only after you grant analytics consent. | United States |
| Resend | Transactional and digest email delivery | Recipient email address, name, and report contents | United States |
| Sign-in (OAuth), address lookup (Maps), and marketing analytics (Google Analytics, marketing site only) | Authentication identity and tokens; property addresses for lookup; marketing-analytics events only after you grant analytics consent | United States (global) | |
| Meta | Marketing-measurement pixel on the marketing site | Ad-measurement events. Loaded only after you grant marketing-cookie consent. | United States (global) |
Regions & data residency
Regions above indicate each provider’s primary processing location. Where a provider operates globally, data may be processed in other regions in line with that provider’s policies. For data-residency specifics or a copy of our data-processing terms, contact support@portfoliq.ai.
Changes to this list
We update this page when we add or remove a subprocessor. To be notified of changes, email support@portfoliq.ai. For how we handle your data overall, see our Privacy Policy.