Last updated: 2026-04-20
PureBox uses the third-party service providers below (subprocessors) to deliver the service. We update this list before engaging new subprocessors that process customer data.
| Subprocessor | Purpose | Data categories | Region |
|---|---|---|---|
| Google (Gmail API) | User-directed access to the authenticated user's Gmail mailbox to read metadata and apply labels/actions requested by the user. | Email metadata, message headers, labels, message IDs, minimal body content required for classification. | Global (Google Cloud) |
| Microsoft Azure | Application hosting, compute and network infrastructure for PureBox backend and frontend. | Application logs, request metadata, encrypted operational data at rest. | United States / EU (configurable per environment) |
| Supabase | Managed authentication (Supabase Auth) and Postgres database with row-level security for user-scoped data. | Account identifiers, email address, hashed credentials, user preferences, classification metadata. | United States / EU (per project configuration) |
| Stripe | Payment processing, subscription billing, and invoicing. | Name, billing email, payment method metadata (Stripe-tokenized), subscription status, invoice history. PureBox does not store full card numbers. | United States / Global |
| Azure OpenAI | LLM-based classification of email metadata into categories that the user reviews before any action is taken. | Email subjects, sender addresses, minimal metadata needed for classification. No message bodies are retained by the model provider. | United States / EU (Azure region configurable) |
| Transactional email provider | Delivery of account/system email such as password reset and receipts. Currently handled via Supabase Auth's built-in provider; a dedicated provider will be listed here before onboarding. | Recipient email address, email template payload. | United States / EU |
| Observability / error tracking | Application monitoring and error telemetry via Azure-native diagnostics. Any additional third-party vendor will be added here before engagement. | Request metadata, stack traces, anonymized user IDs. | Varies with provider |
We will update this page before adding or replacing a subprocessor that processes customer data. Contact support@pureboxai.com to request change notifications.