Subprocessors
Last updated —
These are the third-party service providers Knack relies on to run the service, what each processes, and where each is located.
Active subprocessors
Knack uses the third-party providers below to operate the service. Each processes personal information only to provide its service to us, under a data-processing agreement. This list may change; we will update it here.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Primary application database | All account data — contractor and customer names, contacts, addresses, quotes, transcripts, acceptance records | Australia (Sydney) |
| Fly.io | Application hosting | All data in transit through the app; acceptance IP addresses | Australia (Sydney) |
| Cloudflare R2 | File storage | Voice recordings, site photos, plan documents, generated PDFs, forwarded supplier invoices | Global (Cloudflare network) |
| Resend | Email delivery | Customer name and email; email content; PDF attachments with acceptance details | United States |
| Groq | Speech-to-text | Voice audio, which may contain spoken customer names, phones, and addresses | United States |
| OpenAI | AI drafting and extraction | Transcript text; customer name, phone, email, and address extracted from voice notes | United States |
| Anthropic | Reading forwarded supplier invoices | Supplier invoice documents forwarded by the contractor | United States |
| Clerk | Authentication | Contractor name, email, and login/session data | United States |
| Stripe | Subscription billing | Contractor billing name and email (card data is handled entirely by Stripe) | United States |
| Geoapify | Address lookup and geocoding | Address text typed or stored for a customer or site | Europe (Germany) |
| AddressFinder | Address lookup (New Zealand fallback) | Address text | New Zealand |
Alternate and failover providers
The following are present in the software but are not in the default path. They may process the same categories of data as their primary equivalent if selected as an alternative or used as a failover: Google (Gemini) and xAI (Grok) as alternatives for AI drafting; OpenAI as a speech-to-text failover; and OpenStreetMap Nominatim for address lookup only if the providers above are unconfigured.
Infrastructure providers
Sentry captures application errors with personal information scrubbed before sending (no request bodies, no client IP), from the United States. LINZ Basemaps provides aerial map imagery (map tile coordinates only, no personal information) from New Zealand. Browser push services (Google, Apple, Mozilla, Microsoft) deliver notifications using an encrypted device subscription and a payload that contains no personal information.