Sub-processors

Every vendor that touches your data.

Full transparency on the third-party services we use to run 5S Reviews — what they do, what data they see, and where they're based.

Supabase Inc.

Active DPA
Purpose
Database hosting, user authentication, and real-time data services
Data processed
User accounts, business data, reviews, AI responses, consent records
Location
United States (AWS us-east-1)

Stripe, Inc.

Active DPA
Purpose
Payment processing, subscription management, tax calculation, and invoicing
Data processed
Billing information, subscription details, payment methods, tax IDs
Location
United States

Anthropic PBC (Claude AI)

Active DPA
Purpose
Primary AI language model for generating review responses
Data processed
Review text, business context, brand voice preferences
Location
United States

OpenAI, LLC

Active DPA
Purpose
Fallback AI language model for review response generation
Data processed
Review text, business context
Location
United States

Resend, Inc.

Active DPA
Purpose
Transactional and notification email delivery
Data processed
Email addresses, email content, delivery metadata
Location
United States

Twilio Inc.

Active DPA
Purpose
SMS and WhatsApp notification delivery for review approvals
Data processed
Phone numbers, message content, delivery status
Location
United States

Google LLC

Active DPA
Purpose
OAuth authentication, Google Business Profile API, Google Places API
Data processed
Google account info, business profile data, review data, place information
Location
United States

Functional Software (Sentry)

Active DPA
Purpose
Application error monitoring and performance tracking (optional)
Data processed
Error logs, stack traces, request metadata (no PII)
Location
United States

Questions about how we handle data?

Read the privacy policy or get in touch — a real person reads every message.

Last reviewed · March 2026