Subprocessor Register
RateGuard Pro uses the following third-party service providers to host, secure, operate, support, and deliver the platform. These providers may process broker account data, client mortgage data, or operational metadata depending on the feature used.
Last updated June 10, 2026
| Subprocessor | Purpose | Data processed | Location / safeguards |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Broker account data, client mortgage records, authentication metadata, uploaded files | SOC 2DPACanada primaryPrimary database hosted in AWS ca-central-1. |
| Vercel | Application hosting, serverless functions, CDN, deployment logs | Request metadata, application logs, and operational payloads processed by serverless functions at runtime | SOC 2DPAUnited StatesApplication infrastructure with contractual data protection terms. |
| Stripe | Subscription billing and payment processing | Billing contact details, subscription status, payment metadata; card data is processed by Stripe, not RateGuard Pro | PCI DSS L1SOC 2DPAUnited States |
| Resend | Transactional and campaign email delivery | Recipient email addresses, message content, delivery events, bounce and complaint events | SOC 2DPAUnited StatesUsed to deliver platform and broker-authorized client communications. |
| Google Workspace (Gmail) | Email delivery for certain broker and client communications | Recipient email addresses and message content for emails sent via Gmail | SOC 2ISO 27001DPAUnited States |
| OpenAI | AI assistant and text-processing features where enabled | Broker-provided prompts and contextual data necessary to generate requested outputs | SOC 2DPAUnited StatesUsed for AI features in the platform. |
| Anthropic | AI features, including rate-sheet and document parsing and assistant tools | Broker-provided prompts and document content necessary to generate requested outputs | SOC 2DPAUnited StatesUsed for AI features in the platform and Rate Scout. |
| Railway | Hosting for the Rate Scout rate-extraction service | Rate sheet content and extraction metadata processed by the Rate Scout service | DPAUnited StatesInfrastructure with contractual data protection terms. |
Change notice: RateGuard Pro will provide at least 14 days' notice before adding a new subprocessor that will handle personal information. Brokers may object by contacting jeff@rateguardpro.ca.