Legal
Subprocessors
The third parties that process our customers' data to provide Clauhub, what each one does and which data it receives.
Last updated: October 25, 2026Service operated by Clauhub Software LLC.
To provide the service
They process data as soon as you use the feature that needs them.
| Provider | What for | Data it processes |
|---|---|---|
| CloudflareLocation: Cloudflare's global network | Hosts the app and its API, stores your files, keeps sessions, connects to the database, runs AI models and records errors and technical activity. | Everything you send and receive while using Clauhub: your account and organization data, files (XML, PDF, photos), sessions and technical logs. |
| PlanetScaleLocation: US (east) | The PostgreSQL database that stores the platform's records. | Accounts, organizations, tax documents and their data, sales, customers, inventory and audit logs. |
| Resend | Sends the platform's emails (invitations, notices, reports) and receives email at the addresses Clauhub manages. | The recipient's or sender's email and name, and the message content. |
| AutumnLocation: US | Your organization's plans, subscriptions, credits and usage limits. | Your organization's identifier and name, billing email and usage counts. |
| Stripe | Charging your subscription: payment, invoices and the billing portal, through Autumn. | Name, email, RFC and payment details. Stripe collects card details directly; Clauhub never receives them. |
| OpenRouter | AI features you choose to use (assistant and agents): takes your request to the chosen model, today OpenAI's GPT-4.1 mini. | What you write and the information needed to answer you. |
| Mistral AI | Text reading (OCR) of the documents and images you upload, to extract their data. | The file being read. |
| PAC authorized by SAT | Stamping and cancelling the invoices (CFDI) you issue. | Each invoice's content: issuer and receiver RFC and name, line items, amounts and taxes. |
| Google (Tag Manager and Google Ads) | Measures ad campaigns on clauhub.com: which visits come from an ad and which ask for a demo or sign up. | The pages you visit on clauhub.com, where you came from and browser cookie identifiers. Nothing you keep inside the platform. |
| Google (Google Wallet) | Loyalty cards in Google Wallet, when your business turns them on. | The holder's name, points, the card's code and your business's brand. |
CloudflareLocation: Cloudflare's global network
- What for
Hosts the app and its API, stores your files, keeps sessions, connects to the database, runs AI models and records errors and technical activity.
- Data it processes
Everything you send and receive while using Clauhub: your account and organization data, files (XML, PDF, photos), sessions and technical logs.
PlanetScaleLocation: US (east)
- What for
The PostgreSQL database that stores the platform's records.
- Data it processes
Accounts, organizations, tax documents and their data, sales, customers, inventory and audit logs.
Resend
- What for
Sends the platform's emails (invitations, notices, reports) and receives email at the addresses Clauhub manages.
- Data it processes
The recipient's or sender's email and name, and the message content.
AutumnLocation: US
- What for
Your organization's plans, subscriptions, credits and usage limits.
- Data it processes
Your organization's identifier and name, billing email and usage counts.
Stripe
- What for
Charging your subscription: payment, invoices and the billing portal, through Autumn.
- Data it processes
Name, email, RFC and payment details. Stripe collects card details directly; Clauhub never receives them.
OpenRouter
- What for
AI features you choose to use (assistant and agents): takes your request to the chosen model, today OpenAI's GPT-4.1 mini.
- Data it processes
What you write and the information needed to answer you.
Mistral AI
- What for
Text reading (OCR) of the documents and images you upload, to extract their data.
- Data it processes
The file being read.
PAC authorized by SAT
- What for
Stamping and cancelling the invoices (CFDI) you issue.
- Data it processes
Each invoice's content: issuer and receiver RFC and name, line items, amounts and taxes.
Google (Tag Manager and Google Ads)
- What for
Measures ad campaigns on clauhub.com: which visits come from an ad and which ask for a demo or sign up.
- Data it processes
The pages you visit on clauhub.com, where you came from and browser cookie identifiers. Nothing you keep inside the platform.
Google (Google Wallet)
- What for
Loyalty cards in Google Wallet, when your business turns them on.
- Data it processes
The holder's name, points, the card's code and your business's brand.
Services you connect
They receive data only if you or your organization connect them, with your own account on each.
| Provider | What for | Data it processes |
|---|---|---|
| Stripe and Mercado Pago | Your business's online and terminal payments, with your account. | Amount, order and your customers' payment details. |
| Slack, Microsoft Teams, Google Chat and WhatsApp Business (Meta) | Messaging channels to talk and get notices from Clauhub. | Messages, attachments and participants' names. |
| Gmail and Microsoft 365 | Mailboxes you connect to read and reply from Clauhub. | Emails and attachments in the connected mailbox. |
| Google and GitHub | Signing in with your account on those services. | Your account's name and email. |
Stripe and Mercado Pago
- What for
Your business's online and terminal payments, with your account.
- Data it processes
Amount, order and your customers' payment details.
Slack, Microsoft Teams, Google Chat and WhatsApp Business (Meta)
- What for
Messaging channels to talk and get notices from Clauhub.
- Data it processes
Messages, attachments and participants' names.
Gmail and Microsoft 365
- What for
Mailboxes you connect to read and reply from Clauhub.
- Data it processes
Emails and attachments in the connected mailbox.
Google and GitHub
- What for
Signing in with your account on those services.
- Data it processes
Your account's name and email.
- SAT is not a subprocessor: it is the authority from which Clauhub downloads and validates your tax documents on your behalf, with your e.firma.
- Some providers are outside Mexico; transfers are made with contractual safeguards under the LFPDPPP.
- When we add or change a subprocessor, we will update this page.
Data processing agreement (DPA)
If your company needs a data processing agreement, we send it on request.
Request the DPA