Ledgers · Legal
Sub-processors
Ledgers uses a small number of vetted third parties to deliver the service. Each is bound by data-protection terms and acts only on our instructions.
This page supports our Data Processing Agreement and Privacy Policy. For Anthropic specifically, we set out exactly what is sent to the AI and what never is. We will give notice of material changes to this list so customers can object before a new sub-processor starts handling their data.
| Provider | What they do | Region |
|---|---|---|
| Anthropic | AI models (categorisation, drafting, assistant) — Not used to train foundation models | USA |
| Supabase | Database, authentication, file storage | UK (London, eu-west-2) |
| Vercel | Application hosting & delivery — Application compute is pinned to London; requests travel over Vercel's global edge network. Vercel Inc. is US-incorporated, so provider support access is covered by its DPA | UK (London, lhr1) / global edge |
| Stripe | Subscription billing & card payments — Engaged on paid plans | EU / USA |
| Resend | Transactional & briefing email | USA |
| Twilio | SMS / WhatsApp notifications — Only if you enable mobile alerts | USA |
| TrueLayer | Open-banking transaction feeds — Only if you connect a bank feed | UK / EU |
| GoCardless | Pay-by-bank / Direct Debit — Only if you enable bank payments | UK / EU |
| Google Drive / Gmail document import; favicons — Only if you connect Google | EU / USA | |
| Sentry | Error monitoring — Diagnostic data about faults, which can include request context | USA |
Where a sub-processor is outside the UK, transfers are protected by adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
To be notified of changes or to raise an objection, email privacy@ledgers.work.
Questions about this document? Contact legal@ledgers.work or book a call.