Subprocessors
Coherence uses the providers below to run the Service. Each is bound by data protection terms at least as protective as our Data Processing Addendum. We give at least 30 days' notice of changes on this page and by email to workspace owners.
| Provider | What it does for us | Where data is processed | Transfer safeguard |
|---|---|---|---|
| Supabase, Inc. (USA) | Database, file storage and sign-in | United States (Virginia) | SCCs |
| Vercel, Inc. (USA) | Hosting of the application and website; AI Gateway | United States | EU–US Data Privacy Framework and SCCs |
| Google LLC (USA), through Vercel AI Gateway | AI models for drafting, classification and reading documents, with zero data retention | United States | SCCs through Vercel |
| OpenAI, L.L.C. (USA), through Vercel AI Gateway | Search embeddings for Seller Advisor's knowledge base, with zero data retention | United States | SCCs through Vercel |
| TypeSafe AI (USA), through Vercel AI Gateway | Classification, matching and claim checks (the Jev model), for example deciding whether an email is a receipt, with zero data retention | United States | SCCs through Vercel |
| Stripe Payments Europe, Ltd. (Ireland) and Stripe, Inc. (USA) | Payments, invoicing and tax calculation | EU and United States | EU–US Data Privacy Framework and SCCs |
| Resend, Inc. (USA) | Sign-in and service emails | European Union (Ireland); Resend staff and some systems in the United States | EU–US Data Privacy Framework and SCCs |
Not subprocessors. Google (Gmail) and Revolut Business accounts that a workspace connects are the customer's own accounts, which Coherence accesses on the customer's instruction. Systems and AI clients a customer connects through the API or MCP server receive data on the customer's instruction and are the customer's own choice (DPA Section 2.5). FastMoss and similar TikTok Shop data providers supply public market data to Coherence and receive product names and links, not customer personal data.
Where the Service runs
Coherence's infrastructure is operated by the providers above, mainly in the United States (Virginia), under the laws of the United States; emails are sent from Resend's European Union region (Ireland) and payment data is also processed by Stripe in the European Union. We protect data against unlawful government access with encryption and access controls, we review every request and challenge any that does not meet the law, and we tell affected customers about a request where the law allows.
What you can export
On request to office@coherenceltd.com, free of charge and within 30 days, in structured, machine-readable formats:
| Data | Format |
|---|---|
| Workspace, members and roles | JSON |
| Creator briefs, product facts and research | JSON, and briefs as Markdown |
| Seller Advisor questions and answers | JSON |
| Receipts Manager matches and expense records | CSV and JSON |
| Receipts and invoices collected | Original files (PDF and images) |
| Usage, licences and billing history | CSV |
Business Licences also include API access to each tool once its API is released; today the API offers the catalogue endpoint. Our data formats are standard JSON and CSV with field names as shown in the export. Our data formats are standard JSON and CSV with field names as shown in the export.