Skip to main content
Rental Reputation
Sign inSign up
← Back home

Subprocessors

Rental Reputation uses carefully controlled service providers (“subprocessors”) to help process verification, moderation, support, and security operations. Claimants never receive reviewer evidence or identity. The list below is updated within 30 days of any material change. Material additions also trigger a user notification.

Current subprocessors

Stripe

USA / Australia (data residency)

Purpose: Subscription billing

Data processed

  • Customer name + email (for receipts)
  • Payment method details (handled directly by Stripe; never touch our servers)

Cloudflare R2

Global edge; data residency configured per region

Purpose: Public photo + media storage (entity images)

Data processed

  • Uploaded image bytes (post admin pre-moderation)
  • Image metadata (size, content-type, upload timestamp)

Neon

ap-southeast-2 (Sydney)

Purpose: Postgres database hosting

Data processed

  • All product data (encrypted in transit + at rest)
  • Reviews, profiles, claims, verifications, audit events

Clerk

USA

Purpose: Authentication and session management

Data processed

  • User identity (email, display name)
  • Sessions, social auth tokens (Google / etc. when used)

Sightengine

EU

Purpose: Image moderation pre-screen (auto-approve / auto-reject / flag for human review)

Data processed

  • Public image URLs only (no platform metadata)
  • Vendor receives the publicly-addressable image; nothing else

Resend

USA

Purpose: Transactional email delivery (dispute notifications, review notifications, account-related messages)

Data processed

  • Recipient email address + display name
  • Email subject + body (privacy-sealed copy only — never reviewer identity, claimant statement, or evidence)

What subprocessors never see

  • Reviewer identity, contact details, IP address, or evidence files.
  • Private verification documents (lease, bond, condition reports, etc.).
  • Dispute evidence or claimant statement text.
  • Decision-making authority — vendors classify, recommend, route, or pre-screen, but Rental Reputation owns the final review-removal, identity-disclosure, dispute, and legal-threat decisions.

Update commitments

We update this page within 30 days of adding, removing, or materially changing any subprocessor. For additions that touch user content or identity data, existing users receive an in-product banner notification and an email when the change takes effect.

Last updated: 29 April 2026