Back to home

Subprocessors

Last updated July 29, 2026

To provide PostalView, XIMA USA LLC engages the third-party service providers (“subprocessors”) listed below, each under a contract that requires appropriate protection of the data they process on our behalf. This list is referenced by our Data Processing Addendum and Terms of Service. We will give notice of new subprocessors where required before they begin processing.

Stripe, Inc.

  • Purpose: Platform subscription billing and Stripe Connect payment facilitation between organizations and their customers.
  • Data processed: Billing contact, subscription and payment metadata, card data (held by Stripe; never stored by PostalView).
  • Processing location: United States

Supabase

  • Purpose: Private object storage for identity documents and the managed PostgreSQL database.
  • Data processed: All application data, including identity-document images in a private bucket accessed only through short-lived signed URLs.
  • Processing location: United States

Prisma Data Platform (Accelerate)

  • Purpose: Database connection pooling and query caching.
  • Data processed: Transient query traffic to the application database.
  • Processing location: United States / global edge

Vercel Inc.

  • Purpose: Application and API hosting and the edge network.
  • Data processed: All request/response traffic; log data, IP address, and user-agent.
  • Processing location: United States / global edge

Resend

  • Purpose: Transactional email delivery (primary provider).
  • Data processed: Recipient email address and message content for transactional and notification email.
  • Processing location: United States

Amazon Web Services (Amazon SES)

  • Purpose: Transactional email delivery (fallback provider).
  • Data processed: Recipient email address and message content for transactional and notification email.
  • Processing location: United States

Cloudflare, Inc.

  • Purpose: Edge network and geolocation headers used for security and forensics.
  • Data processed: IP address and coarse geolocation of requests.
  • Processing location: United States / global edge

Neubox

  • Purpose: DNS management for the domain only.
  • Data processed: None — no personal data is processed.
  • Processing location: Mexico

Contact

Questions about our subprocessors? Contact us at legal@postalview.com.

This document is provided for general information and does not constitute legal advice.