InvogiLegal
Subprocessor list
Effective 30 September 2026. This subprocessor list names the external providers that may process customer personal data for Invogi and explains when and why we use them.
Invogi subprocessors
These providers process personal data on Invogi's behalf to operate the service. Locations below describe the relevant service footprint; each provider's linked register contains its current affiliates, downstream subprocessors, and detailed processing locations.
| Provider | Purpose and data | Location, conditions, and provider information |
|---|---|---|
| Cloudflare, Inc. | Edge application hosting, API compute, queues, containers, object storage, security, and—only when enabled by an organization owner—Workers AI extraction. May process account metadata, service logs, uploaded documents, invoice content, and extracted fields. | Global network, including the EEA, UK, and United States. Workers AI may use the locations and downstream providers in Cloudflare's current register. See Cloudflare's subprocessor list and DPA. |
| Supabase Pte. Ltd. | Managed PostgreSQL system of record. May process account, organization, supplier, invoice, finding, audit, integration, usage, and billing-administration data. Invogi does not use Supabase Auth, Storage, or Realtime. | Primary storage follows Invogi's configured project region; provider support and downstream processing may occur in other listed locations under its transfer safeguards. See Supabase's subprocessor list and DPA. |
| Google Cloud EMEA Limited | Enterprise Document OCR for scanned, image, long, or uncertain invoice documents. May process the submitted document and return OCR text, layout, confidence, page, and bounding-polygon data. | EU multi-region. Used only when external document processing is enabled and structured or local extraction is insufficient, or when Invogi uses Google-only extraction as an operational fallback. See Google Cloud's subprocessor list and Cloud Data Processing Addendum. |
| Clerk, Inc. | Authentication, session management, account identity, and organization access. May process names, email addresses, user identifiers, session data, device/network metadata, and security events. | United States hosting with the transfer mechanisms described by Clerk. Used for application accounts. See Clerk's subprocessor list and DPA. |
| Plus Five Five, Inc. (Resend) | Transactional organization invitations and billing-usage alerts. May process recipient email addresses, organization names, invitation links, and the limited operational content of those messages. It does not receive invoice documents. | United States and the locations used by its downstream providers. Used only when Invogi sends a transactional email. See Resend's subprocessor list and DPA. |
Other recipients and customer-directed services
Paddle.com Market Limited and the applicable Paddle group entities act as merchant of record for subscriptions and process buyer, payment, tax, and billing-contact data under their own privacy terms. Paddle does not receive invoice content. This controller-to-controller disclosure is not part of the subprocessor list. See Paddle's Privacy Policy and Data Sharing Addendum.
ERP systems, webhook destinations, and other integrations selected by a customer are customer-directed recipients rather than Invogi subprocessors. Open-source libraries running inside Invogi's own infrastructure are not external recipients and are not listed here.
Changes and objections
The customer gives general written authorization for the subprocessors listed above. Invogi will notify the account owner's registered email address at least 30 days before a new or replacement subprocessor begins processing customer personal data. A customer may object on reasonable data-protection grounds within 15 days of that notice. We will work in good faith on a commercially reasonable alternative; if none is available, the customer may terminate the affected service before the change takes effect. Where an urgent security or legal requirement prevents advance notice, Invogi will give notice as soon as reasonably practicable.
Questions or objections can be submitted through customer support. This register forms part of the Data Processing Agreement.