Sub-processors
NextiaTax uses service providers to operate the product. A provider receives only the information reasonably needed for its function; not every provider receives every data category. We use contractual and other measures intended to protect information under our control.
Active providers
| Provider | Purpose | Data categories | Processing location |
|---|---|---|---|
| Microsoft Azure | Core hosting, database, file and export storage, queues, secrets, monitoring, email, and optional WhatsApp delivery | Account, business, document, transaction, support, notification, and technical data as needed | Core app resources in Canada; some global Azure services may process elsewhere |
| Microsoft Entra External ID | Account identity, authentication, and sign-in security | Name, email, identifiers, authentication and security metadata | Microsoft global service; processing location may vary |
| Azure AI Document Intelligence and Microsoft Foundry models | OCR, document-field extraction, categorization support, and AI assistant responses | Document content, extracted text, selected bookkeeping context, prompts, and outputs | Azure resources configured in Canada; Global deployment types may process globally |
| Stripe | Checkout, recurring billing, invoices, fraud prevention, and billing portal | Contact, billing, payment, subscription, and transaction metadata | United States and other Stripe processing locations |
| Cloudflare | Marketing-site hosting, content delivery, DNS, and security | IP address, user agent, request, security, and diagnostic data | Global edge network |
| Expo, Apple, and Google push services | Optional mobile push notifications | Push token, device platform, notification title/body, and destination link | Global processing; location depends on provider and device platform |
Planned or feature-dependent providers
The following provider is disclosed for transparency but should be treated as inactive until its feature is enabled in production.
| Provider | Purpose | Data categories | Processing location |
|---|---|---|---|
| Plaid | Optional read-only bank connections and transaction import | Bank account metadata, balances, transactions, connection status, and provider token; not bank passwords | Canada, United States, and other provider locations |
Changes
We may update this list when providers or processing locations change. Material changes will be reflected in the Privacy Policy or communicated where required. Questions can be sent to [email protected].