Sub-processors

touBill™ — who else processes data on our behalf

The complete list of who processes touBill data on our behalf.

We work with a small set of vetted service providers to run the platform. They process data only as necessary to operate touBill, under contracts that bind them to substantially equivalent privacy protections. This page lists all current sub-processors and what they do. We update this page whenever we add or change one.

Platform infrastructure

Supabase

Authentication, database, and file storage.

Vercel

Application hosting.

Sentry

Error and crash reporting (consent-gated; see the Cookie Policy).

AWS S3

Media file storage.

Cloudflare Stream

Video upload, processing, and playback.

Cloudinary

Image transformations.

Upstash Redis

Rate limiting and short-lived caching.

Resend

Transactional email.

AI providers

Anthropic

Claude models (primary), plus Anthropic's Claude web-search tool used to retrieve additional public web context for generation.

OpenAI

Used as a fallback when the primary is unavailable.

Google Gemini

Fallback.

OpenRouter

Fallback multi-model router.

AI providers receive government-source text and platform-generated prompts to produce summaries and inferences on the platform's behalf. See the Privacy Policy's "AI-Generated Content" section for detail on what user data does and does not enter these systems.

Not a sub-processor of user content

Voyage AI — embeddings for retrieval. Only receives public government text and platform-generated summaries. Your posts, comments, and DMs are not sent to Voyage. Listed here for transparency; not a sub-processor of your personal data.

How this list is maintained

When we add a new sub-processor, or when a sub-processor materially changes what they process for us, we update this page. Material changes to the Privacy Policy trigger a 14-day advance notice by email and in-app; where the change is a sub-processor addition or swap, that notice points back here.

Contact

Questions about a specific sub-processor, or requests for our Data Processing Addendum with any of these vendors: email privacy@sovraos.com.

Effective: July 2026 · Last updated: July 18, 2026