Legal

Subprocessors

Last updated 22 October 2026 · version 2026-10-22

Preview draft, pending legal review. This list is accurate for the preview as of the date above. We will update it before we start using a new provider.

This notice lists the companies that handle personal information when you use the Sum∗ suite apps (the "Apps"), published by Janisis, Inc. It is part of our Privacy Policy (https://sumone.app/legal/privacy).

• A subprocessor handles information for us, under our instructions.
• An independent service is one you choose to connect. It handles your information under its own terms and privacy policy.

We require each subprocessor to use your information only to provide its service to us, and to protect it at least as well as our Privacy Policy does.

Regions marked [confirm] are still being checked with the provider.

Subprocessors

Cloudflare, Inc.

• What for: runs all our servers, databases and storage, and routes mail sent to receipt forwarding addresses.
• What data: everything our servers hold, as the Privacy Policy describes. This includes your account email, encrypted sync copies, encrypted connection access, forwarded receipts and Outlook add-in items, diagnostics, the record of your acceptance, and IP addresses as requests pass through.
• Where: United States and other countries where Cloudflare has data centres.
• When used: always, for any feature that uses our servers.
• Status: in use.
• Terms: Cloudflare Data Processing Addendum

SMTP2GO

• What for: sends sign-in codes and invitation emails.
• What data: your email address and sign-in code. For invitations: the recipient's email address, the names in the invitation, the message and the link.
• Where: [confirm: New Zealand, United States or other region].
• When used: whenever you sign in, or an App sends an invitation you asked for.
• Status: in use.
• Terms: SMTP2GO Privacy Policy; SMTP2GO Data Processing Agreement (issued to account holders in the SMTP2GO dashboard, not published online)

Anthropic, PBC

• What for: understands your questions and words assistant answers.
• What data: your question, your last few exchanges, and the App, date, language and currency. Only if you turn on "Show summaries to the assistant": totals, counts and category names for the period you ask about.
• Where: United States.
• When used: only if you turn on Suite voice.
• Status: in use.
• Terms: Anthropic Commercial Terms of Service; Anthropic Data Processing Addendum

ElevenLabs

• What for: turns your speech into text, and reply text into speech, for Suite voice.
• What data: audio of what you say, and the reply text, which can include figures from your records.
• Where: United States [confirm].
• When used: only if you turn on Suite voice.
• Status: in use.
• Terms: ElevenLabs Terms of Service; ElevenLabs Data Processing Addendum

Ntropy Network, Inc.

• What for: identifies the business behind a transaction.
• What data: for each transaction, its description, amount, date, direction (money in or out), currency and country, sent under one shared identifier for our whole service.
• Where: United States [confirm].
• When used: only if you turn on Enhance with AI. It can then run in the background for new transactions.
• Status: in use.
• Terms: Ntropy Privacy Policy; Ntropy Trust Center

Google LLC (Google Maps Platform and logo lookups)

• What for: checks addresses, finds business details, and fetches business logos.
• What data: address lines and region; business-name searches and region; website names for logos. Requests come from our servers, without your account or device details. We keep only Google's reference number for a place.
• Where: United States and other countries where Google operates.
• When used: when you check an address, or when Enhance with AI looks up a business.
• Status: in use.
• Terms: Google Maps Platform Terms of Service; Google Controller-Controller Data Protection Terms

Stripe, Inc.

• What for: web payments for paid plans, through Stripe's Managed Payments. Stripe runs the subscription for us. The seller of record is Link, Stripe's consumer payment service, which takes payment, handles tax, receipts, billing support and refunds as a business in its own right under its own terms and privacy policy, not as our provider.
• What data: your name, email, payment details (held by Stripe and Link, never by us), billing address and country, and plan status.
• Where: United States and other countries where Stripe operates.
• When used: only when you buy or manage a paid plan.
• Status: not yet in use. Paid plans are not on sale yet.
• Terms: Stripe Services Agreement; Stripe Data Processing Agreement

Independent services you choose

Plaid Inc.

• What for: connects US and Canadian bank and card accounts to the Mac App, read-only.
• What data: you sign in to your bank through Plaid, not through us. Plaid sends us account names, the last digits of account numbers, balances and transactions. We pass these to your Mac without storing them. We keep the access Plaid gives us, encrypted.
• Where: United States.
• When used: only if you connect a bank on the Mac.
• Status: in use on the Mac App.
• Terms: Plaid End User Privacy Policy

Revolut

• What for: connects a Revolut Business account to the Mac App, read-only.
• What data: business account and transaction data, including payee details. We keep the access Revolut gives us and the key for your certificate, encrypted.
• Where: United Kingdom or European Economic Area [confirm].
• When used: only if you connect Revolut Business on the Mac.
• Status: in use on the Mac App.
• Terms: Revolut API Agreement; Revolut Business Customer Privacy Notice

Apple Inc.

• What for: distributes the Apps, and provides on-device speech, maps and place search.
• What data: your device sends its location to Apple's maps services when you allow location. It does not come to us. On-device speech stays on your device.
• Where: United States and other countries where Apple operates.
• When used: always, for distribution. Maps only if you allow location.
• Status: in use, under Apple's own privacy policy.
• Terms: Apple Privacy Policy

Australian Business Register

• What for: looks up Australian business names and ABNs.
• What data: a business name or ABN only.
• Where: Australia.
• When used: only when Enhance with AI looks up an Australian business.
• Status: in use.
• Terms: ABN Lookup Web Services Agreement

Not offered

• Basiq (Australian open banking): not offered. Australian open-banking feeds are not available in the Apps.
• Mailbox scanning (Google, Microsoft, Zoho): not available yet. Any mailbox screen in the preview uses sample data and connects to nothing.
• Teller, TrueLayer, SnapTrade: shown as "Notify me at launch" tiles only. They connect to nothing.