Trust & Security · Subprocessors
Service providers and subprocessors
These services are integrated into the relevant FinCoreFlow processing paths. Enabled features and deployment configuration determine which services receive your information; not every provider receives every document. Supplier certifications do not certify FinCoreFlow itself.
Inventory reviewed: 9 September 2026
Vercel
Application hosting and request handling
Web/API requests and data required to execute the requested service.
Neon (PostgreSQL)
Application database
Account, workspace, extracted accounting and workflow records.
Microsoft Azure Blob Storage
Document storage
Uploaded documents and related stored files.
Microsoft Azure Document Intelligence and Azure OpenAI
OCR and AI-assisted extraction/classification
Document content sent through the enabled backend OCR paths and extraction results.
Resend
Transactional email and enabled email intake
Recipient addresses, sign-in/service messages and documents supplied through enabled intake paths.
Expo, with Apple and Google notification infrastructure
Optional mobile push delivery
Push tokens and notification payloads for registered devices.
Sentry
Configured error monitoring
Diagnostic events and request context; sensitive-data scrubbing reduces unnecessary detail.
PostHog
Configured product/website analytics
Selected usage events and associated identifiers; not the entire receipt document as an analytics payload.
Optional integrations
Google Drive and Microsoft OneDrive can supply documents when a workspace connects those sources. Enabled phone verification uses Twilio to handle the phone number and verification request. Optional logo generation has a separate OpenAI integration; this is not the Azure-hosted OCR route. Any enabled integration must be included in the customer-specific provider inventory.
Locations and safeguards
Infrastructure location, processing location and support access are different. We do not promise EU-only processing or infer signed data-processing/transfer agreements from a vendor name. Ask privacy@fincoreflow.com for the applicable deployment locations and safeguards before relying on a residency requirement.