A subprocessor is anyone we hand your data to in order to run the service. This is the complete list — not a marketing summary of it — so your own security review has something real to check against.
Database hosting and sign-in. Sees everything you put into Scanified — assets, customers, rentals, invoices, scan history, accounts. Hosted in Oregon, US (us-west-2).
Runs the web application. Sees requests as they pass through — the same data, in transit, not stored separately. Delivered from Netlify’s global edge network; the application itself runs from Portland, OR, kept close to the database on purpose.
Sends transactional email on our behalf — invoices, statements, and team invitations. Sees the recipient address and the content of what we send.
Error monitoring. Sees stack traces from failures, which can incidentally include request data.
QuickBooks Desktop is not on this list. When you connect it, Web Connector talks directly from your own machine to our servers — there is no third party in between and nothing about your QuickBooks file passes through anyone else’s infrastructure.
If we add a subprocessor with access to your data, that is a material change to how we handle it, and it gets the same treatment as any other material change under our terms: we tell the account owner by email before it takes effect.