Sub-processors
Last updated: July 29, 2026
To deliver the Service, QuickBits OÜ engages the third-party providers ("sub-processors") below. Each processes Personal Data on our behalf under a data processing agreement and only as needed for its stated purpose. Where a sub-processor is located outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
Infrastructure and storage
| Sub-processor | Purpose | Location |
|---|---|---|
| Neon | Database hosting | EU |
| Vercel | Web and application hosting | EU / United States |
| Fly.io | API, realtime, and background job hosting | EU (Frankfurt) |
| Cloudflare R2 | File and document storage | EU |
| Cloudflare | CDN and image optimization | United States |
| Upstash | Cache and session store | EU / United States |
AI providers
| Sub-processor | Purpose | Location |
|---|---|---|
| Fireworks AI | Cat and financial analysis models | United States |
| Google (Gemini) | Semantic search embeddings | United States / EU |
| Mistral AI | Document reading, extraction, and classification | EU |
Operations and communications
| Sub-processor | Purpose | Location |
|---|---|---|
| Resend | Transactional and marketing email | United States |
| Sentry | Error tracking | United States |
| Meta (WhatsApp Business) | Optional notification delivery | United States |
| OpenPanel | Product analytics with consent | EU |
Open-banking providers
When you connect a bank account, GoCardless retrieves your account data as a licensed account information service provider. It acts as an independent data controller, not our sub-processor, so it is not listed above. See Section 9 of our Privacy Policy.
Changes
We may update this list as our service evolves. Material changes to sub-processors that handle Personal Data will be reflected here with a new effective date. To be notified of changes in advance, contact hello@quickbits.io.