Subprocessors
Last Updated: August 21, 2026
Last Reviewed: August 21, 2026
DynaTax AI uses third-party service providers ("subprocessors") to deliver our services. This page lists all subprocessors who process customer data on our behalf, including the types of data processed, processing location, and links to their privacy policies.
All subprocessors are contractually required to protect your data and use it only for providing services to DynaTax AI.
Active Subprocessors
Infrastructure & Hosting
| Provider | Service | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Application hosting, database, cache, document storage (S3), CDN — full infrastructure | Application data, tax documents, receipts, encrypted files | USA | Link |
Financial Services
| Provider | Service | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing, bank account connections (Stripe Financial Connections) | Credit card info, billing address, payment history, linked account transaction history and balances | USA | Link |
AI & Machine Learning
IMPORTANT: AI providers process your financial and tax data to provide categorization, insights, and suggestions. We do not use your data to train AI models. AI providers process data under strict contractual terms.
| Provider | Service | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| AI Processing Services | AI tax analysis, transaction categorization, document OCR, receipt processing, chat assistance | Transaction data, documents, financial info, receipt images, merchant names, amounts, expense descriptions, tax questions | USA | Contractual data protection with each provider; vendor list available under NDA on request |
Document & Workflow Services
Document management and electronic signatures are built and operated in-house by DynaTax AI — no third-party e-signature subprocessor is used. Signed documents are stored encrypted on AWS S3 (see Infrastructure above).
Identity Verification
| Provider | Service | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Stripe, Inc. | Professional ID verification | ID documents, photos, professional licenses, background check data | United States | Link |
Analytics & Monitoring
Communication
| Provider | Service | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Resend, Inc. | Transactional emails | Email addresses, message content | USA | Link |
| Twilio Inc. | SMS notifications, voice and video sessions | Phone numbers, SMS message content, call/session metadata | USA | Link |
| Pusher Ltd (MessageBird) | Real-time in-app notifications and messaging delivery | User identifiers, notification payloads | USA / EU | Link |
Subprocessor Changes
We may add, remove, or replace subprocessors from time to time. When we add a new subprocessor that processes personal data, we will:
- Update this page with the new subprocessor details
- Ensure the new subprocessor is contractually bound to protect your data
- For Enterprise customers: Provide 30 days advance notice via email
Last Updated: August 21, 2026
Next Review: November 21, 2026
International Data Transfers
Our subprocessors are located in the United States. Where personal data is transferred internationally, it is protected by:
- Standard Contractual Clauses (SCCs): EU-approved data transfer mechanisms, where applicable
- GDPR Compliance: Our subprocessors maintain GDPR-compliant data practices
Questions
For questions about subprocessors or data processing:
All subprocessors listed are contractually obligated to protect your data in accordance with GDPR, CCPA, and other applicable data protection laws. Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) are in place where required.
Enterprise customers may request copies of relevant DPAs by contacting legal@dynatax.ai.
Last Updated: August 21, 2026