Third-party services used by BilagPilot
This is a short overview of external services that may be used for operations, payments, communication, forms, lookups and optional integrations. Which suppliers actually process data depends on the features that are configured and used.
Supabase
- Company country
- Singapore
- Data processed in
- EU (Stockholm)
- Purpose
- Authentication, database, sessions and private file storage.
Vercel
- Company country
- United States
- Data processed in
- EU (Stockholm) and globally, including the United States
- Purpose
- Hosting, runtime, logging, analytics, performance and BotID protection.
Stripe
- Company country
- Ireland
- Data processed in
- Globally, including the United States and India
- Purpose
- Checkout, payments, subscriptions, invoices, payment status and the customer portal.
Resend
- Company country
- United States
- Data processed in
- United States
- Purpose
- Sending email and receiving replies and attachments by email when these features are used.
OpenAI
- Company country
- United States
- Data processed in
- United States
- Purpose
- AI assistant, document review, posting suggestions and bank statement analysis when AI features are used.
Anthropic
- Company country
- Ireland
- Data processed in
- United States, Europe, Asia and Australia; storage in the United States
- Purpose
- AI assistant when a Claude model is used.
TypeSafe AI
- Company country
- United States
- Data processed in
- United States
- Purpose
- Suggesting columns for CSV/Excel imports (column headers) and the expense type of items in «Request documents» (title, supplier, voucher text and account) and in the setup's «What are the clients missing?» (the title only), when configured.
Google
- Company country
- Ireland / United States
- Data processed in
- Globally
- Purpose
- Optional sign-in and registration with a Google account.
Microsoft
- Company country
- United States
- Data processed in
- Globally, including the United States
- Purpose
- Optional sign-in and registration with a Microsoft account.
GatewayAPI
- Company country
- Denmark
- Data processed in
- EU; SMS routing depends on the recipient's country
- Purpose
- Sending SMS when SMS reminders are enabled.
Formspree
- Company country
- United States
- Data processed in
- United States and other countries where the supplier operates
- Purpose
- Receiving contact, quote request and app development forms.
Cloudflare
- Company country
- United States
- Data processed in
- Globally, including the United States and EEA
- Purpose
- Spam and bot protection with Turnstile, and an analytics proxy when configured.
Cal.com
- Company country
- United States
- Data processed in
- United States; some subprocessors in other countries
- Purpose
- Meeting and product demo booking, and available meeting time lookups.
PostHog
- Company country
- United States
- Data processed in
- EU (Germany)
- Purpose
- Usage analytics and session recordings on public pages, and trial signup conversion measurement, after consent and when configured.
Sentry
- Company country
- United States
- Data processed in
- EU (Germany); some account data in the United States
- Purpose
- Error tracking and technical monitoring when configured.
QuickBooks Online
- Company country
- United States
- Data processed in
- United States and other countries where the supplier operates
- Purpose
- Optional integration for companies, missing documents and transfer of selected files.
Xero
- Company country
- New Zealand
- Data processed in
- Globally, including the United States and Australia
- Purpose
- Optional integration for organisations, missing documents and transfer of selected files.
FreeAgent
- Company country
- United Kingdom
- Data processed in
- United Kingdom, EU, United States and India
- Purpose
- Optional integration for clients, missing documents and transfer of selected files for UK and US accounts.
Sage Accounting
- Company country
- United Kingdom
- Data processed in
- Ireland and the United States; other locations depend on account region
- Purpose
- Optional integration for clients, missing documents and transfer of selected files for UK, Irish and Canadian accounts.
Last updated 4 November 2026. This list is updated when the services we use change materially. See also the privacy policy for more information about data processing and subprocessors.