← Legal & Trust Centre

Subprocessors

Subprocessor Register

The provider categories and optional integrations that may process data when configured for production.

RestoreCheck IQ Proof Grid trademarkRestoreCheck IQControl. Verify. Improve.™Policy edition 2026.07.24
This policy is written in plain language for transparency. It does not reduce rights or obligations that applicable law does not permit the parties to change.

1. Important deployment status

This register distinguishes required production providers from optional customer-enabled integrations. A provider must not be represented as active until its production contract, region, security review, and data-processing terms are confirmed. The final provider legal name, processing region, and effective date must be completed before public production launch.

Not every provider receives every category of data. RestoreCheck IQ applies necessity, least privilege, contractual safeguards, and customer configuration.

2. Core provider categories

  • Cloud application hosting and content delivery: application code, request metadata, and encrypted traffic.
  • Managed PostgreSQL database: account, organization, workflow, audit, support, and configuration records.
  • Private object storage: customer-uploaded documents, photos, generated reports, and evidence objects.
  • Transactional email: recipient address and the minimum content needed for activation, security, billing, and support messages.
  • Billing and payment processing: customer, subscription, invoice, transaction, and payment-token information.
  • Monitoring and incident response: minimized error, performance, release, and security telemetry; customer document contents should be excluded.

3. Optional integrations

  • QuickBooks/Intuit: only when an authorized customer connects accounting sync.
  • Twilio or another messaging provider: only when the customer enables SMS notifications.
  • Slack or customer webhooks: only for destinations configured by an authorized customer administrator.
  • OCR or document-processing provider: only if enabled and disclosed for the affected workflow; source documents must not be used to train a provider model without separate lawful authority.
  • Apple and Google distribution services: app-store account, device, diagnostic, purchase, or distribution information governed by the applicable store.

4. Changes and objections

We will update this page before a new material subprocessor begins processing Customer Personal Information and provide contractual notice where required. Customers may raise a reasonable data-protection objection at privacy@restorecheckiq.ca; the parties will work in good faith on a practical alternative.