Legal
Sub-processors & Service Providers
A current list of third-party sub-processors and service providers Brinley uses to operate the platform. Last updated May 1, 2026.
About this list.When you connect a third-party integration to Brinley using your own credentials (BYOI — Bring Your Own Integration), Brinley acts as a data processor on your behalf. You remain the data controller for your customers' information. The sub-processors listed here are used by Brinley to operate the platform itself — not the third-party services you connect via BYOI, which are governed by your own agreements with those providers.
About this table. This page lists two categories of entities: Brinley's direct sub-processors (companies Brinley has a contractual data processing relationship with) and, nested within certain entries, the sub-processors used by those companies in their own operations.
The indented rows within Supabase's entry are Supabase's own fourth-party sub-processors — companies Supabase contracts with to deliver its database and infrastructure services. Brinley does not have a direct data processing agreement with these entities. Their data handling is governed by Supabase's sub-processor agreements and Supabase's own privacy and security commitments, not by Brinley's agreements directly. You can review Supabase's current sub-processor list and their Data Processing Agreement at supabase.com/legal.
A note on Cloudflare. Cloudflare appears in two places in this table. Brinley independently uses Cloudflare for content delivery, DNS, and network security — this is a direct relationship with its own data processing terms. Cloudflare also appears as one of Supabase's own sub-processors, which is a separate, independent relationship between Supabase and Cloudflare. These are distinct contractual chains.
A note on analytics services listed under Supabase. Brinley's Privacy Policy commitment — that no third-party analytics SDKs are embedded in the Brinley Field platform — refers specifically to tracking code, behavioral instrumentation, and analytics SDKs embedded directly in the Brinley Field application. That commitment stands without qualification. The analytics and data services listed under Supabase's sub-processor chain (such as Hex Technologies) are tools Supabase uses internally to operate and monitor their own infrastructure. They are not embedded in the Brinley Field application, and they do not receive Brinley application telemetry or end-user behavioral data through Brinley.
If you have questions about how a specific sub-processor handles data, we recommend reviewing their individual privacy documentation or contacting us at privacy@lumanavi.com.
Infrastructure & Hosting
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting, edge network, serverless functions | United States |
| Supabase | Database (PostgreSQL), authentication, file storage | United States |
| Natural language processing and generation | United States | |
| Customer insight services | United States | |
| Infrastructure hosting | United States | |
| Infrastructure hosting | United States | |
| CDN and edge network | United States | |
| Data analytics services | United States | |
| Cloudflare | CDN, DNS, DDoS protection | United States |
Billing & Payments
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Subscription billing, payment processing for Brinley platform fees | United States |
AI & Intelligence
| Provider | Purpose | Location |
|---|---|---|
| Anthropic | AI intelligence engine (AskBrinley) | United States |
BYOI integrations are not sub-processors
When you connect Xero, Helcim, Square, Azure AD, Twilio, or other platforms to Brinley using your own credentials, those providers are not Brinley sub-processors — they are your own service providers. Brinley accesses their data on your instruction, acting as your data processor. Your agreements with those providers govern their handling of your data independently of Brinley.
For a full description of how BYOI integrations work and how Brinley handles the data they provide, see our platform philosophy and your Brinley Terms of Service.
Changes to this list
Brinley will provide reasonable advance notice of material additions to this sub-processor list. For questions about this list or our data handling practices, contact us at privacy@brinleyatlas.com.
Last updated: May 1, 2026