Last updated August 21, 2026

Service Providers and Subprocessors

This ledger lists only providers that currently process Service data for SCAI LLC, together with their purpose and the data involved.

Current providers

This ledger is updated before a new provider receives Service data.

Supabase

Purpose

Database, file storage, and passwordless authentication.

Data involved

Account emails, organization and portal records, purchase and subscription records, Reports, evidence, and access metadata.

Stripe

Purpose

Hosted checkout, payment processing, subscription management, and billing portal.

Data involved

Billing contact, payment method, purchase, subscription, invoice, refund, and fraud-prevention data. Full card details go directly to Stripe.

Vercel

Purpose

Application hosting, request delivery, and operational logs.

Data involved

Page and API requests, IP address, browser and device metadata, security signals, and application responses.

User-selected connected service

Google sign-in

A user may choose Google as an identity provider. Google then authenticates that user and may provide identity information permitted by the user’s Google settings and the requested scopes. This user-selected connection is described in the Privacy Notice.

Changes and questions

We will give any notice required by an Order or Data Processing Addendum. Questions may be sent to tom@drcanary.com.