Version 2026-09 · Last updated 6 September 2026
Subprocessors
These are the service providers that help us run Renewals360, what each one does, and where it processes data. Each works under a written agreement requiring confidentiality and appropriate security safeguards.
We keep this page current. Before adding a subprocessor that processes personal data, we update this page and give subscribing customers at least 14 days' written notice, so you can raise any concern before it takes effect.
| Provider | Purpose | Data involved | Processing location |
|---|---|---|---|
| Supabase | Database, authentication and document storage for the platform | Workspace records, uploaded documents, account data, session tokens | European Union (London region) |
| Vercel | Hosting and content delivery for the website and platform | Technical request data (IP address, request logs) | Global edge network, United States and European Union |
| Resend | Transactional and notification email delivery | Recipient name and email address, message content | United States and European Union |
| Twilio | SMS notification delivery | Mobile numbers of users who opt in, message content | United States, with regional carrier routing |
| Anthropic | AI document reading, to prefill obligation records for human review | Documents submitted to the AI feature; not used to train models | United States |
| Microsoft | Optional sign-in (name, work email, optional profile photo) and our business email | Sign-in identity data; correspondence with us | European Union and South African data centers |
| OANDA / XE / ExchangeRate-API | Exchange-rate market data for the currency engine | None. No personal data is sent to these providers | Not applicable |
Questions about any provider, or a copy of our data processing terms: hello@renewals360.com.
These documents are provided in good faith and in plain language. They are not legal advice, and they are pending review by qualified legal counsel prior to full commercial launch.