Last updated: September 2026
KontraBooks uses a limited set of third-party service providers (sub-processors) to deliver the service. Each sub-processor is bound by a Data Processing Agreement and is obligated to protect your data to the same standard we hold ourselves to.
We will notify customers by email at least 30 days before adding or replacing a sub-processor. If you wish to receive these notifications, email privacy@kontrabooks.com to be added to the notification list.
Google Cloud Platform
Cloud infrastructure - application hosting, database, and storage
Location: European Union
Vercel
Frontend hosting and global content delivery
Location: Global (edge network); primary region: United States
Resend
Transactional email delivery (account verification, invoice emails, reminders)
Location: United States
Paystack
Payment processing for supported markets
Location: Nigeria / United States
Stripe
Payment processing for supported markets
Location: United States
Flutterwave
Payment processing for supported markets
Location: Nigeria / United States
IntaSend
M-Pesa and mobile money payment processing for supported markets
Location: Kenya
Plaid
Bank account connectivity and transaction data import (where bank reconciliation features are enabled)
Location: United States
Upstash
Rate limiting and session management via managed Redis
Location: European Union
Where sub-processors are located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place. For transfers to the United States and other third countries, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions where applicable.
If you are a customer subject to a Data Processing Agreement with KontraBooks and wish to object to the use of a sub-processor, please contact us at privacy@kontrabooks.com within 30 days of receiving a change notification. We will work with you to find a resolution, though in some cases continued use of the service may not be possible without the sub-processor in question.
See also our Privacy Policy, Data Processing Agreement, and Cookie Policy.