Trust
Subprocessors
These companies process customer data so BurnRateIQ can run. Each one handles only what its job needs. The Privacy Policy explains how we use your data, and Security covers how we protect it.
Last updated October 14, 2026
Who Processes Your Data
| Company | What it does | Data it handles | Location |
|---|---|---|---|
| SupabaseDPA | Database, sign-in and file storage | Account and model data, uploaded files and connection tokens (encrypted) | United States (AWS us-east-1) |
| VercelDPA | Application hosting | Account and model data as the app serves it, and request logs with IP addresses | United States |
| AnthropicCommercial terms | Claude, the AI behind file reading, Ask BRIQ, investor updates and plan suggestions | The files, account names and model figures each AI feature sends (Privacy Policy section 4) | United States |
| StripeDPA | Payments for our plans, partner payouts, and the BurnRateIQ Stripe App | Payment details, handled by Stripe and never stored by us; your email address and plan | United States |
| ResendDPA | Email delivery | Your email address and the emails we send you | United States |
| CloudflareDPA | Turnstile bot check on public forms; R2 storage for encrypted nightly backups | Browser signals and IP address for the bot check; encrypted copies of the database and uploaded files | Global network |
| GitHubCustomer terms | Source code, automated tests and quality checks, and automated connector fixes | Source code; some automated checks read the production database | United States |
| Google and LinkedInGoogle privacy policyLinkedIn privacy policy | Sign-in, only if you choose it | The name, email address and profile picture the provider shares when you sign in | United States |
| SlackDPA | Internal alerts to our team about errors and failed jobsOnly when we turn this feature on. | Alert messages about errors and failed jobs | United States |
| IPinfoPrivacy policy | Company lookup for website visitorsOnly when we turn this feature on. | A visitor's IP address, to find the organization that owns the network; we keep only its name and domain | United States |
| PostHogDPA | Session recordings, to see where people get stuck and reproduce bugsOnly when we turn this feature on. | Page views and session recordings, with typed text masked; user ID, email address and company when you're signed in | United States |
| TidyCalPrivacy policy | Booking calls with our team from the Investors page, only if you choose to book | The name, email address and time you enter when you book a call | United States |
| Frankfurter | Exchange rates (European Central Bank reference rates) for Deel and Remote payroll in other currencies | Currency codes only, no personal data | Public API |
Integrations You Choose to Connect
These systems aren't our subprocessors. You connect them, and they send us your data under the access you grant on their own screens. Disconnect any of them from Data Sources and we stop syncing.
- QuickBooks (Intuit)
- Accounts, transactions and reports from your books
- Xero
- Accounts, transactions and reports from your books
- Zoho Books
- Accounts, transactions and reports from your books
- FreshBooks
- Accounts, transactions and reports from your books
- Wave
- Accounts, transactions and reports from your books
- NetSuite
- Accounts, transactions and reports from your books
- Stripe (your account)
- Subscriptions, invoices and revenue from your own Stripe account
- Chargebee
- Subscriptions, invoices and revenue
- Paddle
- Subscriptions, transactions and revenue
- Gusto
- Employees, titles, start dates and pay
- Deel
- Employees and contractors, titles, start dates and pay
- Remote
- Employees, titles, start dates and pay
- Google Sheets
- A spreadsheet you link, read once as a file upload
Questions about a subprocessor? Ask Support.