Every third party that can touch your data, what it does, and where it processes. Last updated 9 October 2026.
A subprocessor is a company we pay to run part of our platform, which as a consequence can hold or handle your data. We keep this list public and current because you cannot assess a supplier you cannot see. Our commitments about them — equivalent contractual protections, our liability for them, and 30 days' notice before a new one starts — are in clause 8 of the Data Processing Addendum.
| Provider | What it does for us | Data it can hold | Processing location |
|---|---|---|---|
| Convex | Application database and backend that stores and serves your dashboard | All synced business data, account and user records, audit logs | United States |
| Vercel | Web hosting and content delivery for the app and this website | Request metadata and IP addresses in transit; no business records at rest | United States, with global edge network |
| Transactional email provider | Sends sign-in codes, alerts and account emails | Recipient name and email address, and the content of the email we send you | United States |
| FormSubmit | Delivers enquiry and early-access forms from this website to our inbox | Only what you type into a form on this website: usually an email address | United States |
| Payment processor | Takes subscription payments once paid plans open | Billing name, email, business details and card data, which it handles directly — we never see or store your card number | Australia and United States |
The email and payment providers are named as roles above because those parts of the platform are being finalised for launch. We will name the specific companies here before the first paid subscription is charged, and before either handles your data.
↑ Back to contentsServiceM8, Xero and your email provider are not subprocessors. They are your systems, under your own agreements with those companies, and we read from them with your authorisation. Their privacy policies govern the data while it sits in them. We hold read-only OAuth tokens which you can revoke at any time from inside their platforms or ours.
| Platform | What we read | What we write |
|---|---|---|
| ServiceM8 | Jobs, quotes, invoices, clients, staff, job activity and phone call records | Nothing, ever |
| Xero | Invoices, payments, chart of accounts and financial report data | Nothing, ever |
| Google (Gmail) or Microsoft 365 | Email metadata only: senders, recipients, timestamps and subject lines | Nothing, ever — no sending, replying or filing |
We do not use advertising networks, ad-retargeting pixels, session-recording tools, data brokers or AI vendors that train on customer data. There is no third-party analytics tracker inside the dashboard. If that ever changes, this page changes first and you get notice.
Account owners get at least 30 days' email notice before a new subprocessor starts handling your data, along with your right to object, as set out in the Data Processing Addendum. Corrections that do not add a provider — a renamed company, a clarified data category — are made here with an updated date at the top.
Questions about a provider on this list: info@dashboardsolutions.com.au
SOLE ENTERPRISE PTY LTD (ACN 703 066 782), trading as Dashboard Solutions. Queensland, Australia.
We're finishing the build with our first operators. Leave your email and we'll notify you the day trials open — plus 50% off your first three months when you subscribe during your 14-day free trial.
One email at launch. No newsletter, no sales calls.
One tap, completely anonymous. It genuinely shapes what we fix next.
We don't collect your name, email or IP address here.