Subprocessors
Last updated: 2026-09-03 (registry v2026-09-03)
This list is read from the register the platform maintains — the same register our Data Processing Addendum makes the operative list in its section 5, so the two cannot disagree. We keep it current. Material changes are announced 30 days before effect.
Scope is Platform for a processor we use to run the service, and Tenant-selected for one that only processes data if your organization connects it. Transfer basis names the mechanism relied on for that processor; pending means the transfer assessment and clauses are still being finalised, not that the transfer is already covered.
| Provider | Purpose | Location | Scope | Transfer basis |
|---|---|---|---|---|
| MspCoreX SRL — own datacenter | Hosting of the application, its databases, secrets store, object storage, messaging, remote-session relay and the self-hosted AI models | EU (Romania) | Platform | EU/EEA |
| Anthropic | Primary model for the finance copilot (chat, conversation titles, dunning drafts, anomaly narratives, receivables risk, natural-language reporting, QBR) and for the validation pass of RMM alert assist, which has no other provider configured and also falls back to this one when the self-hosted model is down; cloud fallback for the self-hosted models on ticket summaries, smart replies, KB drafts and translations, auto-categorization, invoice OCR, IDS classification, reports and baselines, backup RCA and summaries, compliance and email assists, and CRM assists | USA | Platform | pending |
| Expo (EAS push service) | Mobile push notifications | USA | Platform | pending |
| Google (Fonts, STUN) | Web fonts on every dashboard page; STUN for WebRTC remote sessions | USA | Platform | pending |
| OpenStreetMap Foundation (tiles) / Nominatim | Map tiles in the dispatcher map; server-side geocoding of client addresses | UK / NL | Platform | pending |
| hCaptcha (Intuition Machines) | Anti-fraud on public signup (only when configured) | USA | Platform | pending |
| Stripe | Subscription billing (when enabled) | Ireland | Platform | EU/EEA |
| Cloudflare | DNS + proxy for www.mspcorex.com (marketing site only); public-IP lookup worker for agents | Global edge | Platform | pending |
| ANAF (e-Factura, VAT registry) | Legal obligation: e-invoicing and VAT lookups | Romania | Platform | EU/EEA — legal obligation |
| termene.ro | Company data enrichment (CUI lookup) | Romania | Platform | EU/EEA |
| OpenAI | AI provider selectable per tenant (tenant's own key) as the primary or the fallback model of any AI feature, including invoice OCR, the finance copilot and RMM alert assist; the alert-assist validation pass always stays with Anthropic | USA | Tenant-selected | pending |
| Mistral AI | AI provider selectable per tenant (tenant's own key) | France | Tenant-selected | EU/EEA |
| Microsoft (Microsoft 365 / Graph, Entra ID SSO, Partner Center) | Mailbox ingest, SSO, CSP billing — tenant-connected | EU / USA | Tenant-selected | pending |
| Google (Workspace SSO) | SSO — tenant-connected | USA | Tenant-selected | pending |
| Twilio / Vonage / SMSLink / Web2SMS | SMS reminders — tenant-configured provider | US / UK / RO | Tenant-selected | pending |
| DocuSign | E-signature — tenant-connected | USA | Tenant-selected | pending |
| Bitdefender GravityZone | Endpoint security integration — tenant API key | Romania / EU | Tenant-selected | EU/EEA |
| Backblaze B2 / Wasabi / S3-compatible storage | Backup storage pools — tenant-owned buckets | Tenant's choice | Tenant-selected | pending |
| Slack | Workflow webhooks — tenant-configured | USA | Tenant-selected | pending |