Subprocessors & data hosting
Full transparency on where your data lives and who processes it. Your mandates, beneficial owners and documents are stored in Switzerland. The list below covers every subprocessor that touches data, so your due diligence has nothing to dig for.
Data at rest is in Switzerland. Your database and documents are hosted on Swiss infrastructure, governed by the Swiss Federal Act on Data Protection (revDSG).
| Subprocessor | Location | What it processes |
|---|---|---|
Supabase (database & storage) Primary data store — mandates, beneficial owners, documents | Switzerland | All application data and encrypted documents. This is where your data lives at rest. |
Vercel (application hosting) Serves the web application and server functions | European Union (Frankfurt) | Transient request/response processing. No client data is stored at rest on this layer. |
Anthropic / OpenAI (AI extraction) Document data extraction, when AI features are used | EU / US (provider-dependent) | Only the specific document content you submit for extraction. Not used to train models. Optional — you may bring your own key. |
Resend (transactional email) Sends account and notification emails | European Union | Email address and message content of transactional emails only. |
Stripe (payments) Processes platform subscription billing | EU / US | Billing contact and payment data for your FLIORE subscription. No client mandate data. |
AI document extraction is optional and can run on your own provider key. A data processing agreement (DPA) is available on request. SOC 2 and ISO 27001 are on the roadmap.