Sub-processors
The vetted third parties we use to provide the Service.
Cloudflare, Inc.
Hosting, storage (backups), compute, security, CDN/WAF, and operational logs.
Processing location: United States and global edge locations.
Stripe, Inc.
Billing, payment processing, and subscription management. We do not store full card numbers.
Processing location: United States.
Intuit Inc.
OAuth identity and the QuickBooks Online API (the source system you connect). Technovault is not affiliated with Intuit.
Processing location: United States.
Amazon Web Services, Inc.
Transactional email delivery (operational notices such as login confirmations, backup-status emails, account alerts, and AI reports you subscribe to). Delivered via Amazon Simple Email Service (SES). Not used for marketing email.
Processing location: Canada (Montréal, ca-central-1).
Anthropic, PBC
AI engine provider (the "Claude" engines in the Technovault AI picker). Receives your question and the ledger excerpts needed to answer it, only for questions where you select a Claude engine.
Processing location: United States.
OpenAI, LLC
AI engine provider (the "GPT" engine in the Technovault AI picker). Receives your question and the ledger excerpts needed to answer it, only for questions where you select the GPT engine.
Processing location: United States.
DeepSeek (Hangzhou DeepSeek AI Co., Ltd.)
AI engine provider (the "DeepSeek" engine in the Technovault AI picker). Receives your question and the ledger excerpts needed to answer it, only for questions where you select the DeepSeek engine. Available unless your administrator disables it — your company's administrator can turn this engine off for the whole company.
Processing location: China.
Google LLC
AI engine provider (Gemini). Not currently offered in the engine picker; listed because we periodically re-evaluate Gemini models and may offer one in the future. No customer data is sent to Google unless and until a Gemini engine appears in the picker and you select it.
Processing location: United States.
We impose data-protection obligations on these sub-processors materially consistent with our Data Processing Addendum. We post changes to this list on this page and encourage customers to review it regularly. If a customer objects to a new sub-processor on reasonable data-protection grounds, the customer may stop using the affected Service and request deletion of Customer Data.
Technovault AI sends your question and the ledger excerpts needed to answer it to the AI engine provider you select per question (the picker labels where each engine processes data); a company administrator can disable any engine for the whole company. We do not permit use of your data to train models. The AI reads from your backup and can never write to your books. Customer Data may be processed in Canada, the United States, China (only if you select the DeepSeek engine), and other locations where we or our providers operate; UK/EU transfers rely on Standard Contractual Clauses or an equivalent mechanism. Technovault is not affiliated with Anthropic, OpenAI, Google, DeepSeek, Intuit, or QuickBooks. Questions? Contact us.