Legal

Subprocessors

Draft, last updated pending counsel review

1000595837 Ontario Inc. o/a Inlabs uses the following providers to deliver RunPayroll. Each is bound by a written agreement covering confidentiality, limited use, and security. We give notice before adding or replacing a provider that handles personal information.

Vercel Inc.United States

Application hosting and compute. Data involved: All Service data in transit through the application.

Crunchy Data Solutions, Inc. (Crunchy Bridge)Canada

PostgreSQL database hosting. Data involved: Account, payroll, and audit records.

Cloudflare, Inc. (R2)Canada (bucket region)

Object storage for generated documents. Data involved: Payslips, year-end forms, exports.

Google LLC (Google Cloud KMS)Canada (northamerica-northeast2)

Encryption key management. Data involved: Key material only; no payroll content.

Resend, Inc.United States

Transactional email delivery and inbound mail. Data involved: Recipient addresses, message content.

Stripe, Inc.United States / Canada

Subscription billing. Data involved: Customer billing contact and payment details.

Twilio Inc.United States

SMS delivery (configured, not yet active). Data involved: Phone numbers, message content, when activated.

Counsel Confirm each processing region against the live configuration before publication, and run the Quebec section 17 transfer analysis for the providers processing outside Quebec. Confirm the Cloudflare bucket region and the KMS keyring location against prod settings.

Questions

Questions about providers or processing locations: privacy@runpayroll.ca.