Scope
Mopbe is part of the EVDATI All-in-One Business Ecosystem and is available standalone. A subprocessor handles applicable personal data for EVDATI in providing purchased services; a provider may also be an independent controller for some purposes. This list is based on code and deployment files, not a completed vendor-contract audit.
Render
Detected hosting and PostgreSQL deployment provider. Potential data: application records, accounts, security logs and backups. Likely processor for hosted data. Actual region, subprocessors, DPA execution and backup settings require account verification.
Resend
Detected transactional inquiry, support, invitation and recovery email provider. Potential data: recipients, senders, message content, metadata and temporary recovery links. Processing location, retention and executed DPA require verification.
AI processing provider
Detected AI assistance and PDF/photo invoice extraction provider. Potential data: submitted questions, authorized workflow context, invoice images/PDFs and extracted fields. Provider terms, retention, regions and DPA execution require verification. store:false is not a zero-retention guarantee.
Stripe
Management-confirmed payment provider. A test-only integration foundation is present; no live billing is activated. Expected future payment/contact/billing data and controller-versus-processor roles must be confirmed before activation; no full-card storage or independent PCI certification is asserted.
Other dependencies
Better Auth, PostgreSQL and SQLite are software components, not separately hosted processors merely because the app uses them. Frankfurter receives a public currency-rate request; customer prices are not sent by that code path. GitHub hosts release source; Namecheap/DNS and prior review hosting require operational classification. These are not automatically customer-data subprocessors.
Changes and contact
Before adding a provider to customer-data processing, verify roles, countries, contracts and safeguards. Provide the notice and objection process agreed in the DPA. [LEGAL/OPERATIONAL CONFIRMATION REQUIRED]: final notice period and delivery mechanism. Contact support@evdati.com.