Subprocessors
MainteQC uses the third-party service providers below to deliver the platform. They process data only on our instructions, as processors, under a data processing agreement (DPA). Your business remains the controller of the personal information you manage in MainteQC.
| Provider | Purpose | Hosting region | DPA |
|---|---|---|---|
| Supabase | Database, auth, storage | Canada (ca-central-1) | Yes |
| Stripe | Payments, tax | US | Yes |
| Mapbox | Maps, routing | US | Yes |
| Resend | Transactional email | US | Yes |
| Postmark | Critical email (auth/payment) | US | Yes |
| Twilio | SMS | US | Yes |
| Google Cloud Vision | OCR | US | Yes |
| Google Vertex AI (Gemini) | AI generation | Canada (northamerica-northeast1) | Yes |
| Cohere | AI fallback | Canada (Toronto) | Yes |
| Inngest | Durable workflows (opaque IDs only) | US | Yes |
| Sentry | Error monitoring | US | Yes |
| PostHog | Product analytics | EU | Yes |
| Cloudflare | CDN, Turnstile, R2 | Multi-region | Yes |
| Vercel | Web hosting + custom domains | US | Yes |
| Expo / EAS | Mobile build + OTA | US | Yes |
| Apple | App Store + push | US | SDK relationship |
| Play + FCM | US | SDK relationship |
"DPA" indicates a signed data processing agreement is in place. Providers marked "SDK relationship" (Apple, Google) are platform-level distribution and push services that do not receive your customer data through a credentialed integration.
Questions about this list? Contact our Privacy Officer at privacy@mainteqc.com.