TaxRouter may use the following subprocessors to process customer personal data when providing the service. A provider should appear here only where it acts as a processor or subprocessor for TaxRouter; providers acting as independent controllers must be described separately in the Privacy Policy where required.
The current approved version is published at https://taxrouter.com/legal/subprocessors.
| Provider and legal entity | Service and purpose | Data categories | Primary processing location | Transfer mechanism |
|---|---|---|---|---|
| Vercel Inc. | Application hosting, serverless execution, delivery, operational logs, and object storage | Account, workspace, integration, uploaded-file, export, evidence, content, and technical data | Frankfurt am Main, Germany | Processing in Germany; EU Standard Contractual Clauses or another lawful safeguard apply to any necessary transfer outside the EEA |
| PlanetScale, Inc. | Managed production PostgreSQL database and backups | Account, organization, marketplace, tax, accounting, and application data | Frankfurt am Main, Germany | European processing region; EU Standard Contractual Clauses apply to any necessary transfer outside Europe |
| Plus Five Five, Inc. (Resend) | Authentication, account, support, and service email | Name, email address, message metadata, and message content | United States (primary processing and storage); Ireland (email dispatch via eu-west-1) | EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses |
Payment and connected platforms
Stripe and customer-selected marketplace, payment, tax-authority, DATEV, or SFTP platforms receive data under the customer's direct relationship, authorization, or instruction. They act as independent controllers, customer-directed recipients, or providers to the customer as applicable and are not TaxRouter subprocessors merely because TaxRouter exchanges data with them.
Change notice
Customers with an applicable Data Processing Addendum will receive notice of intended additions or replacements by email at least 30 days before the change. Objections are handled under the DPA.
Security or privacy enquiries may be sent to info@taxrouter.com.