Subprocessors

Core service providers

• Render — application and worker hosting, networking, deployment, and short-term runtime logs; United States.
• Supabase — managed PostgreSQL database, authentication, object storage, secrets vault, backups, and platform logs; United States.
• Stripe — subscription checkout, billing, invoices, and customer billing portal. Stripe receives account and billing information, not payroll calculation data, in the ordinary flow; United States.
• Postmark — transactional, invitation, support, and contact email delivery. Email content may include account or support information but should not include credentials or identifiable payroll data; United States.

AI providers and customer-selected clients

The connector-first onboarding flow uses the AI client selected and controlled by Customer, such as ChatGPT, Claude, or Codex. That provider is Customer’s independent service provider and is not an AJAI LLC subprocessor for that connection. If the optional native PayCanvas onboarding agent is enabled, PayCanvas may use OpenAI as a model subprocessor and will present that processing before use. Customer can choose connector-first onboarding without enabling the native agent.

Public-site analytics

Google Analytics and Microsoft Clarity may process consented public-site usage as described in the Privacy Policy. Those tags do not load on the authenticated payroll workspace or admin domain and are not used to process Customer payroll data.

Updates and questions

Material additions that will process Customer Personal Data are handled under the notice process in the Data Processing Addendum. Contact hello@paycanvas.io with a reasonable data-protection objection or question.