Sub-processors
Last updated: 14 October 2026.
Taxy uses the sub-processors below to provide app.taxy.au and iris.taxy.au. Each processes customer data under written terms with Taxy. We tell customers about any addition or replacement on this list, by updating it and by email, before the new sub-processor processes their data. Customers then have 30 days to object, as set out in our Data Processing Agreement.
| Sub-processor | Purpose | Customer data processed | Location |
|---|---|---|---|
| Google Cloud Platform (Google Australia Pty Ltd) | Cloud hosting and data storage for app.taxy.au and iris.taxy.au | All Customer Content | Australia |
| Twilio Inc. (SendGrid, Segment) | Sending notification emails and receiving the emails clients send to the platform (SendGrid); platform usage analytics (Segment) | Client and entity details contained in notification emails and product-usage events; the emails and attachments clients send in | United States |
| Anthropic PBC | AI tools (Claude) used by Taxy to develop, operate and support the platform. A sub-processor only when that work involves Customer Content or a customer’s information from our calls with it. Model training is turned off, so neither is used to train Anthropic’s models. | Customer Content, and client details from call recordings and transcripts, accessed in that work | United States |
| Aircall Pty Ltd | Business phone calls. A sub-processor only when Taxy speaks directly with a customer or its client, for example in onboarding or support. | Callers’ names and phone numbers; client and entity details discussed on the call | Australia (call recordings); United States (names, numbers and call details) |
| Fireflies.AI Corp. | Recording and transcribing video meetings. A sub-processor only when Taxy meets directly with a customer or its client, for example in onboarding or support. | Participants’ names; client and entity details discussed in the meeting | United States |
| Amazon Web Services (Amazon Web Services Australia Pty Ltd) | Sending email for iris.taxy.au, such as invitations and sign-in links | The email address of the person contacted and the content of the message sent to them. Amazon SES doesn’t keep message content as part of its service, but AWS’s terms let AWS or its third-party providers store and scan email to block spam and malware, and don’t say where | Sydney, Australia |
Each holds ISO 27001 certification, a SOC 2 report, or both.