Sub-processors
NextiaTax uses service providers to operate the product. A provider receives only the information reasonably needed for its function; not every provider receives every data category. We use contractual and other measures intended to protect information under our control.
Active providers
| Provider | Purpose | Data categories | Processing location |
|---|---|---|---|
| Microsoft Azure | Core hosting, database, file and export storage, queues, secrets, monitoring, email, and optional WhatsApp delivery | Account, business, document, transaction, support, notification, and technical data as needed | Core app resources in Canada; some global Azure services may process elsewhere |
| Microsoft Entra External ID | Account identity, authentication, and sign-in security | Name, email, identifiers, authentication and security metadata | Microsoft global service; processing location may vary |
| Azure AI Document Intelligence and Microsoft Foundry models | OCR, document-field extraction, categorization support, and AI assistant responses | Document content, extracted text, selected bookkeeping context, prompts, and outputs | Azure resources configured in Canada; Global deployment types may process globally |
| Stripe | Checkout, recurring billing, invoices, fraud prevention, and billing portal | Contact, billing, payment, subscription, and transaction metadata | United States and other Stripe processing locations |
| Cloudflare | Marketing-site hosting, content delivery, DNS, and security | IP address, user agent, request, security, and diagnostic data | Global edge network |
| Expo, Apple, and Google push services | Optional mobile push notifications | Push token, device platform, notification title/body, and destination link | Global processing; location depends on provider and device platform |
Planned or feature-dependent providers
The following provider is disclosed for transparency but should be treated as inactive until its feature is enabled in production.
| Provider | Purpose | Data categories | Processing location |
|---|---|---|---|
| Plaid | Optional read-only bank connections and transaction import | Bank account metadata, balances, transactions, connection status, and provider token; not bank passwords | Canada, United States, and other provider locations |
Changes
We may update this list when providers or processing locations change. Material changes will be reflected in the Privacy Policy or communicated where required. Questions can be sent to privacy@nextiatax.com.