Subprocessors
Last updated: September 26, 2026
Third-party providers
We use the following subprocessors and hosting providers to deliver authentication, billing, hosting, DNS, error monitoring and operational email services. We will update this page when we add, remove, or replace a provider.
| Vendor | Purpose | Data category | Region / entity |
|---|---|---|---|
| Polar | Merchant of Record for credit pack purchases: checkout, charges, refunds, tax collection/remittance. | Billing identifiers, purchase/order data, payment method (handled by Polar, not stored by us). | Polar Software Inc. — see Polar's own privacy/subprocessor disclosures. |
| Google (Sign-In) | Authentication via Google Sign-In (ID token verification). | Account identifiers (email, name, Google subject id) used to authenticate you. | Google LLC. |
| Vercel | Hosting and delivery of the web application frontend. | Request metadata, session cookies/tokens in transit. | Vercel Inc. — frontend deployed in the fra1 (Frankfurt) region. |
| Hetzner | Hosting of the backend API, parsing service, and database on a dedicated VPS. | Uploaded files, parsed transactions, reconciliation results, account data (database at rest). | Hetzner Online GmbH — Germany. |
| Cloudflare | DNS resolution for finiaerp.com. (Object storage via Cloudflare R2 is supported but not enabled at launch.) | DNS query metadata only, unless/until R2 object storage is activated. | Cloudflare Inc. |
| Sentry | Error monitoring for the frontend and the backend. | Technical error traces, URL and browser. Email addresses, authorization headers, cookies and uploaded file contents are stripped. | Functional Software Inc. — United States. |
| Resend | Operational emails to the team: new sign-up notices, only when enabled from the admin panel. | Email address and name of the new user. | Resend — United States. |