Cargizon — Sub-processors
Last updated: July 22, 2026
9485-2068 Québec Inc. ("Cargizon", the "Processor") engages the third parties below (each a "Sub-processor") to process personal data on behalf of its customers (each a "Controller"). Each Sub-processor is bound by its own data-processing terms materially equivalent to those in our Data Processing Agreement. We give at least 14 days' notice before adding or replacing a Sub-processor (see DPA §4.2).
| Sub-processor | Purpose | Personal data processed | Primary location |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge/CDN, serverless compute | Request data transiting the app; server logs; IP addresses | United States (global edge network) |
| Supabase Inc. | Primary database (PostgreSQL), authentication, file storage | Account and organization data; uploaded documents (POs, invoices, BOLs); authentication identifiers | United States |
| Stripe, Inc. | Subscription billing, payments, Customer Portal | Billing contact name/email; subscription and invoice data; card data is handled by Stripe and not stored by Cargizon | United States (global) |
| Resend (Plus Five Five, Inc.) | Transactional email and inbound email import | Recipient email addresses; email content; inbound attachments processed for import (PDF / Excel) | United States |
| Anthropic PBC | AI document extraction (Claude API) | The content of uploaded documents sent for extraction (may include names, addresses, commercial terms). Anthropic does not train on data submitted through the API. | United States |
| Functional Software, Inc. (Sentry) | Error monitoring / observability | Error events, stack traces, and request context; may include user/organization identifiers | United States |
| PostHog, Inc. | Product analytics and session replay (consent-gated) | Pageviews, feature-usage events, and session recordings — collected only after cookie consent | United States (PostHog Cloud, US) |
| Google LLC (Google Workspace) | Business email and office productivity | Business contact details and correspondence that may include personal information (e.g., support emails) | United States (global) |
| AISStream | Live vessel AIS positions (maritime tracking) | No customer personal data — Cargizon sends vessel MMSI/IMO identifiers and receives public AIS positions | External API |
Questions about our Sub-processors: privacy@cargizon.com.