CANOPY LEDGER

Draft, pending legal review

Subprocessors

Effective date: [EFFECTIVE DATE]

[COMPANY LEGAL NAME] ("Canopy Ledger," "we," "us," or "our") uses the third-party service providers listed below ("Subprocessors") to host and operate the Canopy Ledger Service. A Subprocessor may process personal information contained in Customer Data on our behalf. Each Subprocessor is bound by written terms that require it to protect the information it processes, as described in our Data Processing Addendum.

This list matches Section 5 of our Privacy Policy. Terms used here have the meanings in our Terms of Service.

Current Subprocessors

SubprocessorPurposeInformation processedLocation
VercelHosting and delivery of the web application and SiteAll Customer Data as it passes through the application; request logs (such as IP address and browser information)United States (global edge network)
NeonPostgres database hosting for account data and Customer Data, including built-in backupsAll stored account data and Customer DataUnited States
[ANALYTICS PROVIDER]Website analytics (only where cookie consent is given, if required)Site usage, device, and browser information[LOCATION]
[PAYMENT PROCESSOR]Subscription billing and payment processingBilling contact details and payment information[LOCATION]

Vercel and Neon run on underlying cloud infrastructure operated by other providers, which they disclose in their own subprocessor lists.

[Before publishing: delete the analytics or payment row if that service is not used, replace the bracketed names, and add any other vendor that processes Customer Data or User information (for example, email delivery, error monitoring, or support desk tools). Update Section 5 of the Privacy Policy at the same time so the two lists stay identical.]

Changes to This List

We will update this page at least [SUBPROCESSOR NOTICE PERIOD, e.g., 30] days before a new Subprocessor begins processing Customer Data. To receive these updates by email, write to [CONTACT EMAIL] with the subject "Subprocessor updates." Customers may object to a new Subprocessor as described in Section 6.4 of the Data Processing Addendum.

Contact

Questions about our Subprocessors: [CONTACT EMAIL]

[COMPANY LEGAL NAME], [BUSINESS ADDRESS]