Sub-processors
Every third party that can touch customer data, what they do, and where.
Current sub-processors
This list is kept current. Before a new sub-processor can touch customer data we update this page and email account holders at least 14 days in advance, so a DPA customer has time to object.
- Contabo GmbH — server infrastructure that runs OCR. Germany.
- Google Firebase (Google Ireland Limited) — authentication, database and file storage. europe-west3, Frankfurt.
- Google Gemini API — AI extraction, paid tier. Content is not used to train Google models.
- Vercel Inc. — website and application hosting. Static content and request routing only; documents are not processed there.
- Google Analytics (Google Ireland Limited) — measuring website traffic. Runs in a cookieless configuration: it receives the page address, the referring site, browser type and an approximate location derived from your IP address, which Google states it does not retain. It never receives document content, filenames or extracted text.
- PayPal — payment processing. Receives billing details, never document content.
- Zoho Corporation — delivery of transactional email such as receipts and account notices. Receives your name and email address, never documents.
Who cannot see your documents
PayPal never receives document content. Vercel serves the interface but document processing happens on our own servers. Analytics does not receive document content, filenames or extracted text.
Contact
Questions about this document, or a request relating to your data, go to VisionParse@senithu.lk. We answer data requests within 30 days.