Sub-processors
Last updated 22 October 2026
Every service that handles customer data on Recora’s behalf. The platforms a venue connects itself (Xero, Square and the rest) are the venue’s own providers and are listed at the end for completeness.
| Provider | What it does for Recora | Data it handles | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, database, file storage, email sending and receiving, AI (Bedrock) | Everything in the app, encrypted | Sydney, Australia |
| Anthropic (via AWS Bedrock) | Reads bills and suggests coding | Document images and text, transaction descriptions; not retained or used for training | Sydney, Australia |
| Stripe | Subscription billing | Card details (held by Stripe only), business name, email, subscription status | United States |
| Sign in with Google; Gmail bill capture if connected; phone notifications on Android | Name and email at sign-in; email sender, subject, attachment names and bill attachments if Gmail is connected | United States | |
| Apple | Sign in with Apple; phone notifications on iPhone | Name and email at sign-in; a device token | United States |
| Microsoft | Outlook bill capture if connected | Email sender, subject, attachment names and bill attachments | United States / Australia |
| Open-Meteo | Weather for sales forecasts | Venue suburb only | Europe |
Platforms you connect yourself
Xero, MYOB, Square, Lightspeed, Doshii, Ordermentum, Deputy, Tanda, Planday, Employment Hero, and Uber Eats and DoorDash through their statement emails. Recora reads from these and writes only to Xero or MYOB, and only what you approve.
Changes
We will update this page and email account owners at least 14 days before adding a sub-processor that handles personal information.