DRAFT. Authoritative list published once SOC 2 Type I is signed.
LegalSub-processors
Last updated: 2026-05-23
Finance Operating System uses the following sub-processors to deliver the service. We give at least 30 days' notice before adding a new sub-processor that processes customer personal data; subscribe to updates at privacy@financeoperatingsystem.com.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Primary hosting, compute, database, and object storage. | United States, European Union |
| Cloudflare | CDN, DDoS protection, and edge caching. | Global |
| Stripe | Subscription billing and customer payment processing. | United States |
| Plaid | Read-only bank account aggregation and transaction sync. | United States |
| Anthropic | Claude API for AI Copilot responses. | United States |
| Mindee | Receipt and invoice OCR. | European Union |
| Resend | Transactional email delivery. | United States |
| Check | Payroll runs and tax filings (when payroll add-on is enabled). | United States |
All sub-processors are bound by a data processing agreement that requires technical and organizational safeguards equivalent to those in our own DPA with you.