Subprocessors
Last updated: September 11, 2026
DepreciationPro is operated by FirmPro, Inc. We use the third-party service providers below to store or process data on behalf of our customers. This page lists every one of them, what they do, and what data reaches them.
We do not sell customer data. Anthropic does not train its models on data we send under our commercial terms with them.
| Provider | Purpose | Data processed | Entity country |
|---|---|---|---|
| Microsoft Corporation (Azure) | Application hosting, PostgreSQL database, document storage, and job queues. | All Customer Content at rest, including client records, asset data, uploaded documents, and depreciation calculations. | United States |
| Microsoft Corporation (Azure Communication Services) | Transactional email (account verification, password reset, billing notices). | Recipient email addresses and message content. | United States |
| Anthropic, PBC | AI-assisted document parsing and depreciation processing. | Uploaded documents and selected asset data submitted for interpretation, and the resulting output. | United States |
| Cloudflare, Inc. | DNS and reverse proxy in front of the application. Terminates TLS. | Application traffic in transit. | United States |
| Stripe, Inc. | Subscription billing and payment processing. | Billing contact details and payment information. | United States |
| Intercom, Inc. | In-app support messenger and Help Center. | User identity, email, firm association, and the content of support conversations. | United States |
| PostHog, Inc. | Product usage analytics. | Usage events, device information, IP address, and user identifiers. | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring. | Diagnostic context for errors. Sensitive-field filtering is enabled, and error payloads can still contain fragments of Customer Content. | United States |
| Google LLC (Google Workspace) | Support email, and optional single sign-on where a firm enables it. | Support correspondence, and authentication identifiers where SSO is used. | United States |
Other services we call
Two services receive data from the application but no customer or personal information:
- Have I Been Pwned: checks new passwords against known breaches. We send the first five characters of a hash. No password and no user identity leaves the application.
- NHTSA vPIC: decodes a vehicle identification number when a vehicle asset is added. Only the VIN is sent.
Changes to this list
We update this page whenever a provider is added or replaced. Customers who have signed a Data Processing Agreement with us receive notice of changes on the terms set out in that agreement.
Questions
For questions about this list, our security program, or a diligence review, contact [email protected].