Subprocessors
Last updated: 7 October 2026
Subprocessors: services that process our customers' personal data
| Provider | What it does for Roughneck | Data it handles | Where |
|---|---|---|---|
| Supabase, Inc. | Database, sign-in, file storage and server functions. The Service's data lives here. | All Customer Data, users' account and device records, error reports. | United States (AWS us-east-1, Northern Virginia) |
| Resend (Plus Five Five, Inc.) | Sends the one-time sign-in code by email, through Supabase Auth. | A user's email address and the code. | United States |
| Vercel Inc. | Hosts and serves the app and the verify page. | Standard request logs (IP address, time, page, browser). The app's pages contain no customer records; those come from Supabase. | United States and its global network |
| Stripe, Inc. (Stripe Identity) | The optional photo-ID check on a signing link (The Handshake add-on). | The signer's ID document images and, where asked, a selfie. They sit in Roughneck's Stripe account until Roughneck redacts the session once the result is saved (within 4 days); Stripe deletes the biometric face comparison within one year. Roughneck's database receives only the result, the verified name and times. Stripe is also an independent controller of some of this data for its own purposes (fraud prevention). | United States |
| Resend (Plus Five Five, Inc.) | Sends the few alert emails a user asks for (a customer signed a quote). | The user's email address, the customer's company name, the quote number and the signer's name. | United States |
| Apple, Google, Mozilla and Microsoft push services | Deliver reminders to a device the user turned them on for. Chosen by the user's browser, not by Roughneck. | The reminder's title and short line (for example "2 calls due today" or a customer's company name), encrypted end to end to the device. | Their own networks |
OpenAI, L.L.C. (through Roughneck's hear and readquote server functions) |
Transcribing voice notes and making the audio for Todd's spoken answers (Tell Todd add-on), and reading documents a customer asks Roughneck to read into a quote. For a voice note: turns the user's spoken note into words when the phone's own speech recognition cannot, and reads the words into a log, a meeting and a next step when the phone's own rules are not sure. For a document: reads the lines, terms, addressee and totals from a quote, contract or invoice the user brought in and chose to make signable (The Handshake add-on). Nothing is sent unless the user chooses it. | Voice notes: the recording of the user's own note (discarded once transcribed; Roughneck never stores it), the words, and the names of the user's own accounts so the right one can be matched. No customer's voice is recorded. Todd's spoken answers: the words of the answer, which can name the user's accounts; the audio comes back to the phone and Roughneck does not store it. Documents: the file, which names the shop's customer and its people, prices and terms. Roughneck keeps the file and what was read. | United States |
ElevenLabs, Inc. (through Roughneck's hear server function) |
Makes the audio for Todd's spoken answers (Tell Todd add-on) when Roughneck runs Todd's voice on ElevenLabs. Otherwise OpenAI makes it, and if neither can be reached the phone's own voice reads the answer. | The words of Todd's answer, which can name the user's accounts and contacts. The audio comes back to the phone and Roughneck does not store it. No recording of anyone's voice is sent. | United States |
| Google LLC (Places, through Roughneck's address-lookup function) | Finds a company's office address. | A company's name, city and state. Never a person's name. | United States |
Services the app uses that receive no customer records
These are listed for completeness. None of them receives Customer Data.
| Provider | What it does | What it sees |
|---|---|---|
| Google Fonts (Google LLC) | Serves the app's typefaces to the browser. | The user's IP address and browser, as with any web font. |
| jsDelivr (Prospect One and its CDN partners) | Serves the pinned sign-in code library to the browser. | The user's IP address and browser. |
| US National Weather Service (api.weather.gov) | Forecasts and alerts by county, fetched by the browser. | The user's IP address and the county zone asked for. |
| GitHub, Inc. (Actions) | Runs Roughneck's nightly job that collects public filings. | Public-record data only. |
| Healthchecks.io | Confirms the nightly job ran. | A ping, with no data. |
Public sources
Public-Record Data comes from government agencies' own published files: the oil and gas regulator of each state Roughneck reads (fourteen as of 30 September 2026, among them the Oklahoma Corporation Commission and the Railroad Commission of Texas), with more added as each state goes live. It also comes from public industry sources for rig counts, completions and prices. These are sources, not subprocessors: they receive nothing from us.
Outside sites users open
A tap on a map, a LinkedIn search or a state agency's page opens that site in the user's browser, with the company, place or person the user tapped. Those sites are not our subprocessors. Their own terms apply.