Subprocessor List

Holistic Business Consulting, LLC (InsurCore) uses the following third parties to help deliver the Platform and Services. Each is bound by contractual terms that limit its use of the data it processes. We update this page when our subprocessors change.

Supabase, Inc.

Authentication, PostgreSQL database, file storage and server-side functions.

  • Data processed: account data, application data, Customer Data, uploaded files, audit and session logs
  • Location: United States

Cloudflare, Inc.

Website hosting, content delivery, DNS and security filtering.

  • Data processed: website requests, IP addresses, technical logs
  • Location: Global edge network

Amazon Web Services, Inc.

Optional object storage for files where configured.

  • Data processed: uploaded files and generated artifacts
  • Location: United States

Google LLC (Google Cloud)

AI processing (Vertex AI, Document AI), data processing and storage; Google Workspace integrations you choose to connect.

  • Data processed: prompts, document text and model outputs (with automated redaction of certain identifiers); data you authorize from connected Google accounts
  • Location: United States

OpenAI, L.L.C.

AI processing for mapping suggestions, document analysis, transcription and drafting.

  • Data processed: prompts, field names, limited record samples, document text, meeting audio and model outputs (with automated redaction of certain identifiers)
  • Location: United States

Anthropic, PBC

AI processing for in-app assistant features.

  • Data processed: prompts and model outputs
  • Location: United States

Resend, Inc.

Transactional email delivery.

  • Data processed: recipient names and email addresses, email content
  • Location: United States

Stripe, Inc.

Payment processing and billing.

  • Data processed: billing contact details, payment method details, transaction records
  • Location: United States

Zoho Corporation

Accounting and invoicing.

  • Data processed: billing contact details, invoices, payment status
  • Location: United States

Zoom Communications, Inc.

Video meetings, scheduling and meeting recordings where enabled.

  • Data processed: meeting details, participant names and emails, recordings and transcripts
  • Location: United States

Fathom Video, Inc.

Meeting recording, transcription and summaries where enabled.

  • Data processed: meeting recordings, transcripts and summaries
  • Location: United States

Browserless and Firecrawl

Automated web browsing and website research tools used to perform Services.

  • Data processed: web pages and information we are directed to access
  • Location: United States and European Union

GitHub, Inc.

Source code hosting and deployment automation.

  • Data processed: application code and technical metadata; no Customer Data by design
  • Location: United States

For questions about subprocessors, contact [email protected]. Advance notice will be provided for material changes where required.