Sub-processors
Sub-processors
Last updated: 13 June 2026
To deliver My PocketHR we rely on the following trusted third-party providers. Each is bound by contractual confidentiality and security obligations. This list is provided in addition to our Privacy Policy and DPA.
| Provider | Purpose | Region |
|---|---|---|
| Supabase (database, auth, storage) | Application database, authentication, file storage | Australia (ap-southeast-2) |
| Cloudflare | Edge compute, CDN, DDoS protection | Global edge |
| Stripe Payments Australia Pty Ltd | Subscription billing and payment processing | Australia / United States |
| Lovable AI Gateway (xAI Grok, Google Gemini) | AI inference for chat, document analysis and templates | United States (no-training contracts in place) |
| Mailgun (via Lovable email infrastructure) | Transactional and broadcast email delivery | United States / EU |
| Resend | Admin broadcast email delivery | United States |
We aim to give reasonable advance notice of new or replacement sub-processors that materially affect how customer data is processed. To be notified, email privacy@mypockethr.com.au with the subject "Sub-processor updates".