Sub-processors.
In force from 16 September 2026
The short version
Three providers: Cloudflare for hosting, the database and PDF rendering, with the database in the EU; Stripe for payments, only if you buy Pro; and Resend for email, in the US. Each receives only the data it needs.
An AI assistant you connect over MCP is your own tool under your own agreement, not a sub-processor. There are no advertising or analytics companies, and this page changes when the list does.
This summary is here to be read. The clauses below are what actually binds.Invoice Badger runs on a deliberately small set of providers. Each one only receives the data it needs to do its job. This is the complete list.
Cloudflare, Inc.
What it does: Hosting, database, file and PDF rendering, DNS, CDN and bot protection.
Data handled: All service data (your account, invoices, clients and time entries).
Where: Database stored in the EU; served from Cloudflare's global edge network.
Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.)
What it does: Payment processing and subscription billing. Only used if you buy Pro.
Data handled: Your name, email and card details. Card details go straight to Stripe; we never see or store them.
Where: EU and US, under Stripe's own safeguards.
Resend (Resend, Inc.)
What it does: Sends our transactional emails, such as your welcome, password reset, receipts and account notifications.
Data handled: The recipient email address and the content of the email.
Where: US, under Resend's own safeguards.
What isn't on this list
If you connect an AI assistant to Invoice Badger over MCP (for example Claude), that's your own tool and your own agreement with that provider, so it isn't a sub-processor we impose on you. We don't use advertising or analytics companies.
Changes
We'll update this page and the date above whenever the list changes. Questions? Email support@invoicebadger.com.
Ask, and the wording gets fixed rather than explained.