Main Revenue subprocessors
Version draft-2026-10-07
Current subprocessors
These providers process data for Main Revenue. “Customer Data” means files a customer uploads and anything derived from them. Every provider here is verified from Main Revenue’s running code and configuration.
| Provider | Function | Data it receives | Customer Data | Location |
|---|---|---|---|---|
| Netlify, Inc. | Website and application hosting, serverless functions, form handling, uptime-check storage | All requests and responses in transit (including uploaded files up to 4 MB and application data), contact-form submissions, error logs, uptime-check results (kept 8 days) | Yes | Not pinned to a region (UNKNOWN) |
| Neon (Databricks, Inc.) | Primary database (PostgreSQL) | Accounts, organizations, parsed and normalized project financial records, findings, reports metadata, audit and security logs, order records | Yes | AWS US East 1 (per our records) |
| Amazon Web Services, Inc. | File storage (S3) with encryption keys (KMS); malware scanning of uploads (GuardDuty Malware Protection for S3) | Uploaded files, generated reports and exports (encrypted by Main with a per-organization key before storage); each uploaded file is scanned in a separate quarantine bucket before Main encrypts it | Yes | US East 1 (configured default) |
| Anthropic, PBC | AI model API (mapping suggestions, finding summaries, the Ask Main assistant) | Column headers and up to 3 sample values per unmapped column; finding facts (amounts, dates, project names); in-app questions with up to 5 findings and their source cells; public website questions | Yes | UNKNOWN |
| Stripe, Inc. | Payment processing, receipts and invoices | Buyer email and company name, order amount and reference; card details are entered on Stripe’s page and never reach Main | No | UNKNOWN |
| Resend (Plus Five Five, Inc.) | Transactional email (sign-in links, invitations, order and report notices) | Recipient email address, subject and message text (which can include organization names, order totals and finding counts) | Limited (see data) | UNKNOWN |
| Google LLC (Gmail) | Main’s support inbox: contact-form copies, assistant hand-offs and operational alerts | Contact-form fields, support correspondence, and alert emails (which can include organization names and order or refund amounts) | Limited (see data) | UNKNOWN |
Not subprocessors of Customer Data
For Main’s own business-to-business outreach (not Customer Data), Main uses Brevo and Resend to send email, Gmail to receive replies, and a business-contact data provider for a limited number of records (Privacy Notice section 14).
Not used
Google Calendar and other scheduling tools: Main Revenue has no calendar integration. The “Book a walkthrough” button opens a scheduling link Main sets; that provider sees only what you enter on its page.
Changes
Main updates this list and emails each customer’s account owner at least 30 days before a new subprocessor starts processing Customer Data; customers may object as the Data Processing Addendum describes. [Draft default — attorney to confirm, D-22] Questions: mainaihelp@gmail.com. Version draft-2026-10-07.