Subprocessors
Last updated: July 4, 2026
Pariom does not subcontract data handling without disclosing it. The table below is the complete list of vendors who process customer data. Pariom will provide 30 days' notice before adding new subprocessors.
| Subprocessor | Location | Purpose | SOC 2 |
|---|---|---|---|
| Vercel | US | Application hosting, cron scheduling, and edge network. | ✓ Yes |
| Supabase | US (AWS-hosted) | Postgres database, authentication, and row-level security enforcement. | ✓ Yes |
| Anthropic | US | Claude LLM — used for diagnostic briefs, variance memo generation, and Ask Pariom queries. | ✓ Yes |
| Resend | US | Transactional email delivery (digests, briefs, alerts). Email content may include memo or metric summaries. | No |
| Upstash | US | Redis-based rate limiting on unauthenticated API endpoints. No customer financial data stored. | No |
| Intuit (QuickBooks) / Xero | US | OAuth connections for the memo tool. Read-only access only. | No |
| Stripe | US | Reserved for future payment processing. Not active during the beta period. | ✓ Yes |
To object to a subprocessor or request the full DPA: security@pariom.ai