INFOSISTEMA, SISTEMAS DE INFORMAÇÃO, S.A. ("Infosistema") uses the third parties below to help deliver the bizSupply platform. Each one processes Customer Data on Infosistema's instructions, under a written data processing agreement, and only for the purpose listed. This page is the list referred to in the Terms of Service and in our Data Processing Agreement.
Current sub-processors
| Sub-processor | Purpose | Processing location | Safeguards |
|---|---|---|---|
| Google Cloud Platform and Google Workspace Google Cloud EMEA Ltd (EU customers) / Google LLC (US customers) Since April 1, 2026 | Cloud infrastructure: compute, storage, databases and networking for the Cloud Service, and the billing channel for Google Cloud Marketplace subscriptions. Google Workspace sends the platform’s transactional email (invites, renewal alerts, password resets) and holds the support and account mailboxes you write to. | EU — europe-west1 (Belgium) for non-US customers; US — us-central1 (Iowa) for US customers | Data stays in the customer’s region. Google Cloud Data Processing Addendum, with EU Standard Contractual Clauses where applicable. |
| Google Vertex AI (Gemini models) Google Cloud EMEA Ltd / Google LLC Since April 1, 2026 | AI contract analysis: document classification, field extraction and spend categorisation. Customer documents are not used to train models. | Same Google Cloud region as the customer’s workspace | Covered by the Google Cloud Data Processing Addendum above. |
| OpenAI OpenAI, L.L.C. Since April 1, 2026 | AI contract analysis for workspaces or plugins configured to use OpenAI models. Data is sent through the API only; it is not used to train models. | United States | OpenAI Data Processing Addendum with EU Standard Contractual Clauses. |
| Stripe Stripe Payments Europe Ltd (EU customers) / Stripe, Inc. (US customers) Since April 1, 2026 | Subscription billing, card payments and invoicing for plans bought directly from bizSupply. Stripe receives billing contact and payment details only, never contract content. | Ireland (EU); United States | Stripe Data Processing Agreement with EU Standard Contractual Clauses. |
| Atlassian (Jira Service Management) Atlassian Pty Ltd / Atlassian B.V. Since April 1, 2026 | Support ticketing at support.bizsupply.ai and the in-app assistant’s escalation path. Holds the name, email, ticket text and any job or correlation IDs you include in a request. | Atlassian Cloud (EU and US regions) | Atlassian Data Processing Addendum with EU Standard Contractual Clauses. |
- Purpose
- Cloud infrastructure: compute, storage, databases and networking for the Cloud Service, and the billing channel for Google Cloud Marketplace subscriptions. Google Workspace sends the platform’s transactional email (invites, renewal alerts, password resets) and holds the support and account mailboxes you write to.
- Processing location
- EU — europe-west1 (Belgium) for non-US customers; US — us-central1 (Iowa) for US customers
- Safeguards
- Data stays in the customer’s region. Google Cloud Data Processing Addendum, with EU Standard Contractual Clauses where applicable.
- Since
- April 1, 2026
- Purpose
- AI contract analysis: document classification, field extraction and spend categorisation. Customer documents are not used to train models.
- Processing location
- Same Google Cloud region as the customer’s workspace
- Safeguards
- Covered by the Google Cloud Data Processing Addendum above.
- Since
- April 1, 2026
- Purpose
- AI contract analysis for workspaces or plugins configured to use OpenAI models. Data is sent through the API only; it is not used to train models.
- Processing location
- United States
- Safeguards
- OpenAI Data Processing Addendum with EU Standard Contractual Clauses.
- Since
- April 1, 2026
- Purpose
- Subscription billing, card payments and invoicing for plans bought directly from bizSupply. Stripe receives billing contact and payment details only, never contract content.
- Processing location
- Ireland (EU); United States
- Safeguards
- Stripe Data Processing Agreement with EU Standard Contractual Clauses.
- Since
- April 1, 2026
- Purpose
- Support ticketing at support.bizsupply.ai and the in-app assistant’s escalation path. Holds the name, email, ticket text and any job or correlation IDs you include in a request.
- Processing location
- Atlassian Cloud (EU and US regions)
- Safeguards
- Atlassian Data Processing Addendum with EU Standard Contractual Clauses.
- Since
- April 1, 2026
Changes to this list
Infosistema gives customers at least 30 days' notice before a new sub-processor starts processing Customer Data, by email to the account owner and by updating this page. If you object to a new sub-processor on reasonable data protection grounds, contact us within the notice period and we will work with you on an alternative; where none is possible, you may terminate the affected subscription as set out in the Terms of Service.
Removals and changes that do not involve a new party (a renamed entity, a narrower purpose) are reflected here without a notice period.
What this list covers
This list is limited to parties that process Customer Data inside the bizSupply platform: the contracts, documents, vendor records and account details you upload or that the service produces for you. Providers that only receive data from the bizsupply.ai marketing website (analytics, advertising, affiliate tracking) are described in the Website Privacy Policy. Group companies within Infosistema / Joyn Group that assist with support and administration are covered by the Platform Privacy Policy, not listed here.
Contact
Questions about a sub-processor, or a request for a copy of the Data Processing Agreement: privacy@infosistema.com.