Third Party Index

Snapshot 73160

Document
Subprocessor list
URL
https://kvitanco.com/subprocessors
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
10109 bytes
SHA-256 (raw)
5117fc0f77eff93489dc3ef0011c635f9c5179d14f8ffd85934453439e5ca8e4
SHA-256 (normalized text)
5bf77ff2d50c417594f4c1da50bae12a853f1e29f7fa82ae1ac5965d17e6df3b

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Kvitanco
Language
Processors
The following providers process personal data on Kvitanco’s instructions only as needed to provide the service. Each provider’s subprocessors are governed by its public list and contract terms.
Provider	Purpose	Main data	Main processing regions
Amazon Web Services, Inc. and affiliates	Application hosting, storage, backups, audit logs, and email delivery	Accounts, documents, recognition results, logs, and encrypted integration data	Primary data in Japan (Tokyo); operational and support data in regions designated by AWS
Google LLC and affiliates	Document text recognition, classification, and field extraction through the Gemini API	Uploaded documents, processing instructions, recognition results, and usage	Countries where Google or its subprocessors operate facilities; processing files for no more than 48 hours
Cloudflare, Inc. and affiliates	DNS, traffic proxying, attack protection, and delivery	IP addresses, traffic metadata, URLs, headers, and traffic content	Cloudflare’s global network, including Japan
Payment provider
Stripe and its affiliates handle balance purchases, card payments, refunds, and fraud prevention. Stripe collects card numbers directly, and Kvitanco does not store full card numbers. Depending on the processing, Stripe handles information as our processor or as an independent controller.
Recipients selected by the user
Money Forward Cloud Accounting and freee Accounting are not general processors that handle data for every user. They receive documents, recognition results, and transaction data as user-selected recipients only when a user connects the service and initiates a transfer. Their own terms and privacy policies apply after transfer.
Change notice
If we add a new main provider that handles personal data and the change materially affects users, we normally give notice on this page or by registered email at least 30 days in advance. If advance notice is impracticable because of an urgent security need or to avoid a service outage, we give notice promptly after the change.
Send questions or reasonable objections about a provider to [email protected].