Sub-processors
A sub-processor is a third party we engage that may process personal information as part of delivering the service. This is the complete current list. It is short on purpose — each entry exists because the alternative was building it ourselves, worse.
Current sub-processors
| Sub-processor | What it does | Data involved | Region |
|---|---|---|---|
| Microsoft Azure | Application hosting, PostgreSQL database, blob storage, message queues, telemetry | All application data | Canada Central |
| Microsoft Entra External ID | Authentication and identity directory | Sign-in identity: email, provider identifier, authentication events | Directory may be provisioned outside Canada — see the note below |
| Azure Communication Services | Transactional email delivery — invoices, quotations, reminders, notifications | Recipient address, message content, delivery status | Canada Central |
| Stripe | Our subscription billing. Never your clients’ payments to you | Your billing contact and payment method; subscription and transaction records | Global (Stripe-controlled) |
| Cloudflare | Hosting and content delivery for this marketing website | Standard web request data for pages on nextiainvoices.com | Global edge network |
The identity residency note
All application data is pinned to Azure Canada Central. Entra External ID directories in our subscription may be provisioned outside Canada, which means the record of your login identity — not your invoices, clients or documents — may be held outside the country. We publish this rather than claiming full Canadian residency, because the second sentence would be easier to write and less true.
AI providers
AI-assisted features may involve a third-party model provider. Any provider used for this purpose will be listed in the table above before the feature is generally available, together with what is sent to it. Your business records are not used to train third-party models.
Changes to this list
We will update this page before a new sub-processor begins processing personal information, and the date at the top will change. If you would like to be notified of additions, write to the privacy address on our contact page and ask to be added to the notification list.