Subprocessor Register
RateGuard Pro uses the following third-party service providers to host, secure, operate, support, and deliver the platform. These providers may process broker account data, client mortgage data, or operational metadata depending on the feature used.
Last updated May 3, 2026
| Subprocessor | Purpose | Data processed | Location / safeguards |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Broker account data, client mortgage records, authentication metadata, uploaded files | SOC 2DPACanada primaryPrimary database hosted in AWS ca-central-1. |
| Vercel | Application hosting, edge functions, CDN, deployment logs | Request metadata, application logs, limited operational payloads processed by serverless functions | SOC 2DPAApplication edge infrastructure with contractual data protection terms. |
| Stripe | Subscription billing and payment processing | Billing contact details, subscription status, payment metadata; card data is processed by Stripe, not RateGuard Pro | PCI DSS L1SOC 2DPA |
| Resend | Transactional and campaign email delivery | Recipient email addresses, message content, delivery events, bounce and complaint events | SOC 2DPAUsed to deliver platform and broker-authorized client communications. |
| OpenAI | AI assistant and text generation features where enabled | Broker-provided prompts and contextual data necessary to generate requested outputs | SOC 2DPAOpt-inUsed for broker portal AI features only. |
| Google Cloud Platform | Vision OCR for rate sheet extraction | Uploaded rate sheets and OCR extraction metadata | SOC 2ISO 27001DPA |
Change notice: RateGuard Pro will provide at least 14 days' notice before adding a new subprocessor that will handle personal information. Brokers may object by contacting jeff@rateguardpro.ca.