Last updated: 9 October 2026
Sub-processors
These are the companies that process personal data in Orbinly workspaces for us. They are the sub-processors referred to in our Data Processing Addendum.
Current sub-processors
| Company | What it does for Orbinly | Data it can see | Location |
|---|---|---|---|
| Supabase | Database, sign-in (authentication) and file storage | All content stored in a workspace, including accounts, client records, projects, invoices, messages and files | United States (AWS us-east-1) |
| Vercel | Hosting and the servers that run Orbinly | Everything sent to or from the service passes through it, and request logs | United States |
| Resend | Sending email: invitations, sign-in links, invoices, reminders and notifications | Recipient email addresses and the content of each email | United States (sends through Amazon Web Services) |
| Stripe | Payments: Orbinly's own subscription billing, and client invoice payments for workspaces that connect Stripe | Names, emails and billing details of the people paying. Card numbers go to Stripe directly and never reach Orbinly | United States |
| Anthropic | AI provider, used only if a workspace turns on the optional AI featuresOnly for workspaces that have turned on the AI Assistant. | Only the content needed for a single AI request (such as the messages in a conversation or the invoice being explained), at the moment a person uses an AI feature | United States |
Stripe also acts as an independent controller for its own legal duties, such as verifying the identity of businesses that take payments, under Stripe’s own privacy policy.
Orbinly’s own business email
These providers handle email that people send to Orbinly directly. They do not receive the contents of customer workspaces.
| Company | What it does for Orbinly | Location |
|---|---|---|
| GoDaddy (Microsoft 365 email) | Receives the email people send to Orbinly's own addresses (for example hello@ and privacy@) and our replies | United States |
Tools you choose are not our sub-processors
If you add a third-party tool to your client portal, for example a booking calendar, a form or a video, that tool is your own choice and relationship, not an Orbinly sub-processor. Whether it receives a client’s name or email is a setting you control. See the Terms of Service.
Changes to this list
We will give at least 30 days’ notice of a new sub-processor, as set out in the Data Processing Addendum. To be emailed when the list changes, write to privacy@orbinly.com.
Picxer Technologies, LLC, a Florida limited liability company, operates Orbinly. Email privacy@orbinly.com.