Subprocessors

Last updated: May 10, 2026

This page lists the third-party service providers ("sub-processors") that Incorporate Now Inc (doing business as mailnow.ai) uses to process personal data on behalf of business Customers in the course of providing the Service. It is the live Annex III to our Data Processing Agreement and is referenced from our Privacy Policy and Terms of Service.

Notice of changes

This page is the canonical list of sub-processors and Customers are responsible for periodically reviewing it. Where reasonably practicable, we will use commercially reasonable efforts to announce material additions to this list on this page in advance, but such advance notice is provided as a courtesy and is not guaranteed. Customers may object to a new sub-processor on reasonable data-protection grounds within thirty (30) days after the new sub-processor is published on this page, as described in Section 5 of the Data Processing Agreement.

Last updated: May 10, 2026

Current sub-processors

Sub-processor	Purpose	Categories of data	Location	Privacy / DPA
Clerk, Inc.	Authentication and identity management.	Account profile (name, email, profile image), authentication credentials, sign-in events.	United States	clerk.com/legal/privacy
Replit, Inc. — Object Storage	Object storage for scanned mail PDFs, check images, and deposit receipts.	Scanned mail and check files (full contents), generated thumbnails and previews, exported reports.	United States	replit.com/site/privacy
Replit, Inc. — Application hosting	Application hosting, build, and run-time platform; server logs.	The entire Service runs on Replit infrastructure; request logs and runtime telemetry pass through Replit.	United States	replit.com/site/privacy
Replit, Inc. — Managed PostgreSQL	Managed PostgreSQL database hosting.	All Customer Content stored in the application database at rest, including mail metadata, OCR text, check records, user records, and audit logs.	United States	replit.com/site/privacy
OpenAI, L.L.C.	OCR enrichment, AI-assisted summarization, categorization, and matching of mail items and checks.	OCR text and, where needed, page images of mail items and checks (which may include any personal data appearing on those documents).	United States	openai.com/policies/api-data-usage-policies
Stripe, Inc.	Payment processing for card transactions (subscription and usage-based billing); current payment processor for cards.	Billing contact information, payment metadata, Stripe customer and invoice identifiers. Full card numbers are collected and held by Stripe directly; mailnow.ai does not receive them.	United States	stripe.com/privacy
Twilio Inc. (SendGrid)	Transactional and notification email delivery, including delivery-status webhooks.	Recipient email address, email body content (which may include mail summaries and attachments at the Controller's instruction), delivery status events.	United States	twilio.com/en-us/legal/privacy

Clerk, Inc.
Purpose: Authentication and identity management.
Data: Account profile (name, email, profile image), authentication credentials, sign-in events.
Location: United States
Privacy: clerk.com/legal/privacy
Replit, Inc. — Object Storage
Purpose: Object storage for scanned mail PDFs, check images, and deposit receipts.
Data: Scanned mail and check files (full contents), generated thumbnails and previews, exported reports.
Location: United States
Privacy: replit.com/site/privacy
Replit, Inc. — Application hosting
Purpose: Application hosting, build, and run-time platform; server logs.
Data: The entire Service runs on Replit infrastructure; request logs and runtime telemetry pass through Replit.
Location: United States
Privacy: replit.com/site/privacy
Replit, Inc. — Managed PostgreSQL
Purpose: Managed PostgreSQL database hosting.
Data: All Customer Content stored in the application database at rest, including mail metadata, OCR text, check records, user records, and audit logs.
Location: United States
Privacy: replit.com/site/privacy
OpenAI, L.L.C.
Purpose: OCR enrichment, AI-assisted summarization, categorization, and matching of mail items and checks.
Data: OCR text and, where needed, page images of mail items and checks (which may include any personal data appearing on those documents).
Location: United States
Privacy: openai.com/policies/api-data-usage-policies
Stripe, Inc.
Purpose: Payment processing for card transactions (subscription and usage-based billing); current payment processor for cards.
Data: Billing contact information, payment metadata, Stripe customer and invoice identifiers. Full card numbers are collected and held by Stripe directly; mailnow.ai does not receive them.
Location: United States
Privacy: stripe.com/privacy
Twilio Inc. (SendGrid)
Purpose: Transactional and notification email delivery, including delivery-status webhooks.
Data: Recipient email address, email body content (which may include mail summaries and attachments at the Controller's instruction), delivery status events.
Location: United States
Privacy: twilio.com/en-us/legal/privacy

Other recipients of personal data (not sub-processors)

At the Customer's instruction, mailnow.ai also transmits personal data to the following categories of recipients. These recipients are not sub-processors of mailnow.ai; they receive personal data on the Customer's own behalf or as separate controllers, and their handling of that data is governed by their own terms with the Customer or with the affected individuals.

The Customer's bank (or the bank's deposit channel) — when mailnow.ai physically deposits a Check at the Customer's instruction, the check image and the metadata required to make the deposit are transmitted to the bank or deposit endpoint that the Customer has designated.

Contact

Questions about this sub-processor list, or about how a sub-processor handles your data, can be sent to legal@mailnow.ai.