Subprocessors
Last updated: 2026-10-17
These are the services that receive data from Invoicia in order to run it. Where a vendor is not based in the EU, or we have not yet verified its data processing agreement or data region, the table says so.
| Service | Purpose | Based | Data |
|---|---|---|---|
| Hetzner | Hosting: servers, PostgreSQL database, database backups | Germany | Everything stored in your account: profile, customers, invoices, contact messages, server logs. |
| FjordID (self-hosted Keycloak) | Sign-in and authentication | Operated by us, on our own infrastructure | Email address, name and credentials for your sign-in. |
| Umami (self-hosted, analytics.fjordid.eu) | Cookieless product analytics | Operated by us, on our own infrastructure | Page views and product events (for example that a PDF was downloaded). No cookies. |
| Brevo | Transactional email: invoice emails, contact-form notifications | France | Recipient and sender addresses, and the email content, including the invoice details in the email. Data processing agreement and data region not yet verified. |
| Mistral AI | Reading an uploaded invoice on the free Invoice Extractor (OCR and field extraction) | France | The file you upload to the extractor and the text read from it. Only used by that tool. Data processing agreement not yet verified. |
| Storecove | PEPPOL access point for sending invoices over the PEPPOL network | Netherlands | The invoice as PEPPOL UBL XML: seller and buyer names, addresses, VAT and organization numbers, line items and amounts. Only if PEPPOL sending is enabled; it is not enabled at the moment. Data processing agreement not yet verified. |
| Sentry (@sentry/node, @sentry/react) | Error and performance reporting (10% of requests sampled for performance) | United States company; an EU ingest region may be possible but has not been verified | Error messages, stack traces, request URL, method and request ID, browser details. Not scrubbed: error messages or context can contain personal or invoice data. Under review. |
Notes
- Sentry is not EU-only. Sentry is a US company, and we have not verified which region our events are stored in. We do not scrub personal data from events before they are sent. We are reviewing whether to configure it properly or replace it.
- Sentry issue titles and top stack frames are also passed to an AI coding assistant (Anthropic, United States) by our internal bug-fixing tooling. They are meant to contain no user data, but because events are not scrubbed we cannot guarantee that yet.
- Storecove: we have no signed data processing agreement with Storecove on file. PEPPOL network sending is not enabled today; this row applies only if it is switched on.
- Brevo and Mistral AI: both are based in France, but we have not yet verified the data processing agreement or data region for either.
- Sign-in: authentication is shared with FjordID, a sibling product with the same owner.
- Feedback button: the “Feedback” button loads a form hosted on FormVault (formvault.eu, a sibling product with the same owner). It is only loaded when you open it.
- Company lookup: when you look up a company, the search term is sent to public registries (Brønnøysundregistrene, CVRAPI.dk for Danish CVR, and the PEPPOL Directory). These are public data sources, not processors.
See also the Privacy Policy and Security page. Questions: support@invoicia.eu.