Subprocessors
These are the companies that handle customer data for Supply Checkout, what each one does and what it receives. We add a company here before it handles customer data, and we tell team owners by email at least 30 days before a change that affects them.
- Last updated: October 12, 2026
Service providers
| Who | What for | What they receive | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, database, file storage, backups, sign-in (Amazon Cognito), live updates, logs and error reports (Amazon CloudWatch, including CloudWatch RUM), and security | Everything we store, encrypted at rest and in transit | United States |
| Amazon Bedrock (part of AWS) | Reading receipt photos | The receipt photo, your team's inventory names and prices, and our instructions, for each scan. Photos are not stored. | United States |
| Amazon Simple Email Service (part of AWS) | Sending sign-in codes, invitations and notices | The recipient's email address and the message | United States |
| Stripe | Payments, subscriptions, invoices and the billing portal | The team name, the billing contact details owners enter, the plan and seat count, and payment details, which go straight to Stripe | United States |
| Google Fonts | Loading the app's typefaces | Your browser asks Google's servers for the font files, which sends Google your IP address and browser details | Google's font servers |
| Our email provider | Receiving and answering mail sent to our support and privacy addresses | The messages you send us and our replies | United States |
Only if you choose them
| Who | What for | What they receive |
|---|---|---|
| Google and Apple | Signing you in, if you choose to sign in with them | What their sign-in pages collect under their own privacy policies. They send us your email address, whether it's verified, and your name. |
More
Our privacy policy says what we collect and how long we keep it. To ask a question about this list, email hello@supplycheckout.com.