Sub-processors
The companies that handle personal data on our behalf to run Reimgo, and what each one sees. Last updated 16 November 2026. We announce additions 30 days ahead (see the data processing agreement).
Current sub-processors
| Provider | Purpose | Data it receives | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Application hosting, databases, object storage and nightly backups, operated by us; sending email and receiving forwarded receipts (Amazon SES) | All customer data, encrypted at rest where stated in the privacy policy; for email, recipient addresses, message content and forwarded receipt emails (kept by the mail service for at most 7 days) | United States (US West) |
| Anthropic, PBC | Reading receipt images into expense fields; answering questions in Ask Reimgo | Receipt images and the text read from them; Ask Reimgo questions, help articles and, when live data is on, records the asking person can see, with people's names as codes; never bank details, card numbers, salaries or contact details | United States |
| Meta Platforms, Inc. (WhatsApp Business Platform) | Carrying receipts and messages that users send to Reimgo on WhatsApp, and our replies | The user's phone number, the receipt images and messages they send, and our replies | United States and other countries where Meta operates |
| Stripe, Inc. | Subscriptions, invoices, card payments | Company name, admin email, billing address, invoice amounts; card details are entered on Stripe's pages | United States, with EU and UK entities |
| Google LLC (Google Fonts) | Fonts on this marketing website only | The visitor's IP address when a page loads; no cookies | United States |
Website analytics, not a sub-processor
Google Analytics counts visits to this marketing website, and only for visitors who accept analytics cookies. That is data about website visitors, which we decide how to use. It never includes customer data or anything from the Reimgo app, so Google Analytics is not a sub-processor under the data processing agreement and the 30-day notice of new sub-processors does not apply to it. We list it here so that every provider is on one page.
| Provider | Purpose | Data it receives | Location |
|---|---|---|---|
| Google Ireland Limited (Google Analytics) | Counting visits to this marketing website, only for visitors who accept analytics cookies | For those visitors: the pages they view and when, the page they came from, the campaign tags in the link they followed (such as utm_source=linkedin), how far they scroll, clicks on our sign-up and app store buttons and on links to other sites, files they download, their browser, device type, screen size and language, their approximate location (country and city), which Google works out from their IP address, and a random visitor number kept in a cookie. No customer data and nothing from the app | Ireland; Google and its affiliates may also process the data in the United States and other countries where they operate |
Not sub-processors
"Continue with Google" and "Continue with Microsoft" sign-in send your email address to the provider you chose when you choose to sign in that way; they are your identity providers, not our sub-processors. Your payroll and accounting systems receive the files your finance team exports and imports; they are your processors. AI apps your users connect to Reimgo (when your admin allows it) receive data on your instruction under your own agreement with their provider; they are not our sub-processors.