Subprocessors
Varaxon Technologies LLC d/b/a StatementReady ("StatementReady") uses the service providers below to run the service. Some handle Borrower Data: the bank statements you upload and the data we extract from them. Others handle only account, billing or technical information. The table shows which is which.
For how we handle personal information, see our Privacy Policy.
Subprocessors
| Provider | What it does | Data it handles | Where |
|---|---|---|---|
| Supabase, Inc. | Database, sign-in and multi-factor authentication, and file storage. | Borrower Data (loan files, statements and extracted transactions; statement files are stored encrypted), plus account and sign-in data. | United States. |
| Vercel Inc. | Hosting and the serverless runtime that runs the application and scheduled jobs. | Handles service traffic while requests are processed, including Borrower Data in transit. It is not used to store Borrower Data. Standard hosting and request logs, which can include IP addresses, are kept under Vercel's own policy. | United States. |
| Anthropic, PBC | AI model calls that read scanned statement pages, classify unclear transaction descriptions, and answer support-chat questions. Anthropic is our only AI provider. | Borrower Data: statement page images and transaction descriptions sent for extraction; support-chat messages. | As described in Anthropic's terms. Anthropic's commercial terms say it may not train models on this content. Under Anthropic's standard API retention, inputs and outputs are deleted within 30 days, except content flagged by its safety systems (kept up to 2 years) or where the law requires. Details: Privacy Policy, Section 4. |
| Stripe, LLC | Checkout, subscriptions, invoices and usage billing, on StatementReady's own Stripe account. | Billing data only, no Borrower Data. Stripe collects card details, billing email and address on its own pages. We send our organization ID, plan, and per-file usage counts. | As described in Stripe's privacy policy. Stripe also acts as an independent controller for fraud prevention and legal compliance. |
| Resend | Sends the app's email: password reset, welcome and account emails, borrower upload reminders, receipts and notices. | Recipient email address, subject and message body. Borrower reminder emails contain the borrower's email address and the upload link. No bank statements. | United States. |
| Functional Software, Inc. (Sentry) | Error monitoring, from our servers only. | Technical error details after our scrubber removes email addresses, account-number-like numbers, tokens and sensitive fields. Borrower Data is not intended to be sent. No browser script, no session replay, no cookies. | United States. |
We don't use advertising networks, tracking pixels, or third-party analytics scripts on StatementReady, and we don't use any AI provider other than Anthropic.
Changes: We update this page when this list changes. Questions: support@statementready.net.
Last updated: October 30, 2026.
Varaxon Technologies LLC d/b/a StatementReady