Sub-Processors
Last updated 23 June 2026
We use the following sub-processors to provide our service. Each processes personal information only as needed to perform its function, under confidentiality and data-protection obligations. We maintain this list separately from our policies so that vendor changes do not require re-accepting other documents.
AI processing (via OpenRouter)
- OpenAI — document OCR / data extraction — United States.
- Google — document OCR (fallback) and portrait photo preparation — United States.
- Anthropic — document parsing and OCR (fallback) — United States.
- ByteDance (Seedream) — portrait photo preparation — China.
- Sourceful (Riverflow) — portrait photo preparation — United States/EU.
- OpenRouter — AI request routing — United States.
Infrastructure and operations
- Supabase — hosting, database, and file storage — United States/EU.
- Stripe — payment processing — United States.
- PostHog — analytics and A/B testing — European Union.
- Google Places — address lookup — United States.
- Fingerprint — abuse and fraud prevention — United States.
- Upstash — rate limiting — United States/global.
- Sanity — content management (no personal application data) — United States/EU.
Changes
We may add or replace sub-processors as our service evolves. This page reflects the current list. For questions, email privacy@evisa.help.
This translation is provided for convenience; if there is any conflict, the English version governs.