| Microsoft Azure (AKS + App) | Application hosting, container orchestration, ingress, secrets, monitoring. | West Europe | All workspace traffic and Customer Data in flight; logs and metrics in operational telemetry. |
| Microsoft Azure (Managed PostgreSQL) | Primary database for accounts, workspaces, CRM records, and audit history. | West Europe | Account data, workspace settings, Customer Data, audit logs, billing metadata. |
| Cloudflare R2 | File Vault object storage for invoices, attachments, signed documents, and branding assets. | EU buckets where available; global edge | File uploads, generated PDFs, branding assets. |
| PayPal | Subscription plan checkout, recurring billing, webhook delivery, refunds. | Global (PayPal-owned infrastructure) | Billing email, plan and subscription state, transaction amount, masked payment-instrument identifiers (no full card numbers). |
| Microsoft 365 SMTP | Outbound transactional email (account, billing, security, reminders, invoices, document signing). | Microsoft EU data centers | Recipient address, subject, message body, attachments you choose to send. |
| Google (OAuth) | Optional social sign-in identity verification. | Global (Google-owned infrastructure) | Email address and basic profile returned by Google when you choose to sign in with Google. |
| GitHub (OAuth) | Optional social sign-in identity verification. | Global (GitHub-owned infrastructure) | Email address and basic profile returned by GitHub when you choose to sign in with GitHub. |
| Google Firebase Cloud Messaging | Delivers push notifications to the Android and iOS apps. | Global (Google-owned infrastructure) | The device push token and the notification title and text, which can contain a record title such as an invoice number. The data sent with a push holds record ids only. |
| OpenAI | Powers the optional AI assistant and AI writing help. | United States (OpenAI-operated infrastructure) | What you type into the assistant and the workspace records it reads to answer (for example client, invoice and task details). Used only to produce your reply. |
| Google Analytics | Optional website analytics on the public pages, only after a visitor accepts analytics cookies. | United States and other Google locations | Page views, the page address and title, approximate location, browser and device type, and a random cookie identifier. No account, workspace or customer data. Advertising features and Google signals are off; data is kept for 14 months. |
| Google Play (Billing) | Checkout and recurring billing for plans bought in the Android app, including renewals, cancellations, refunds and payment notifications. | Global (Google-owned infrastructure) | The order number and purchase token, plan and subscription state, renewal and expiry dates, and an opaque account identifier we pass when you buy. Google Play handles your payment method; we never see card numbers or your Google account details. |