Subprocessor Register
RateGuard Pro uses the following third-party service providers to host, secure, operate, support, and deliver the platform. These providers may process broker account data, client mortgage data, or operational metadata depending on the feature used.
Last updated September 22, 2026
| Subprocessor | Purpose | Data processed | Location / safeguards |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Broker account data, client mortgage records, authentication metadata, uploaded files | Canada primaryPrimary database hosted in AWS ca-central-1; supporting processing may occur outside Canada. |
| Amazon Web Services (AWS) | Cloud infrastructure used by Supabase | Broker account data, client mortgage records, authentication metadata, and uploaded files stored through Supabase | Canada primaryca-central-1 for the primary database; supporting processing may occur outside Canada. |
| Google Workspace, Gmail API, Google Apps Script, Google Sheets, and related operational services | Account identifiers, operational records, recipient email addresses, message content, and workflow data as required by the enabled feature | Canada / US / globalProcessing location varies by Google service and account configuration. | |
| Microsoft | Microsoft identity and Microsoft Graph email services for connected Outlook accounts | Connected account identifier, encrypted authorization token, recipient email address, and message content for broker-authorized sends | Canada / US / globalProcessing location varies by Microsoft service and account configuration. |
| Vercel | Application hosting, serverless functions, CDN, deployment logs | Request metadata, application logs, and operational payloads processed by serverless functions at runtime | US / global edgeApplication infrastructure and global delivery network. |
| Stripe | Subscription billing and payment processing | Billing contact details, subscription status, payment metadata; card data is processed by Stripe, not RateGuard Pro | US / globalPayment infrastructure operated by Stripe. |
| Resend | Transactional and broker-authorized email delivery | Recipient email addresses, message content, delivery events, bounce and complaint events | United StatesUsed to deliver platform and broker-authorized client communications. |
| Zoom | Registration and delivery for optional training sessions | Registrant name, email address, selected session, and attendance metadata | US / globalUsed only when a person registers for an enabled training session. |
| OpenAI | AI assistant, transcription, and training features where enabled | Broker-provided prompts, audio, and contextual data necessary to provide the requested feature | United StatesUsed only for enabled AI features. |
| Anthropic | AI features, including rate-sheet and document parsing and assistant tools | Broker-provided prompts and document content necessary to generate requested outputs | United StatesUsed for enabled AI features and Rate Scout. |
| AssemblyAI | Optional audio transcription and speaker diarization | Audio submitted to an enabled transcription feature and the resulting transcript | United StatesUsed only when the optional provider is enabled. |
| Railway | Hosting for the Rate Scout rate-extraction service | Rate sheet content and extraction metadata processed by the Rate Scout service | United StatesInfrastructure used by the Rate Scout service. |
Change notice: RateGuard Pro will provide at least 30 days' notice before adding a new subprocessor that will handle personal information. Brokers may object in writing within 14 days of receiving the notice by contacting jeff@rateguardpro.ca. A shorter notice period may be used only where reasonably necessary to address an urgent security issue, comply with law, or preserve service continuity. In that case, notice will be provided as soon as reasonably practicable, with the reason for the shortened period, and the objection right will be preserved.