Sub-processors
Last updated: 10 June 2026
Taxy engages the sub-processors below to provide app.taxy.au. Each processes Customer Content only as needed to deliver the service, under written data-protection terms at least as protective as our Data Processing Agreement. We give customers at least 30 days’ notice of any change to this list, as set out in the DPA.
| Sub-processor | Purpose | Customer data processed | Location |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud hosting and storage for app.taxy.au | All Customer Content | Australia (primary); United States (backups) |
| Twilio Inc. (SendGrid, Segment) | Transactional email — reminders and notifications (SendGrid); product analytics (Segment) | Client and entity details contained in notification emails and product-usage events | United States |
| Anthropic PBC | Operational AI — Claude assists Taxy to operate, develop and support the platform and may access Customer Content in that work. Business / zero-retention tier — not stored, not used to train models. | Customer Content accessed during operational and development work | United States |
All Taxy sub-processors are SOC 2 and/or ISO 27001 evidenced.