Subprocessors
As of: 20 October 2026
When a fiduciary keeps its customers’ books in its Bilanzi account, Bilanzi processes this data on its behalf. The data processing agreement, which the fiduciary accepts in its account, governs this.
These are the providers Bilanzi uses for it. We announce any change by email at least 30 days in advance.
Processor
Mainbranch GmbHRainspergstrasse 68608 BubikonSwitzerlandThe providers
| Provider | Task | Location | Data of the client and its customers |
|---|---|---|---|
| Supabase | Database, sign-in, storage of receipts | Zurich, Switzerland | all |
| Infomaniak Network SA | AI: reading receipts, proposing entries, answering questions, matching bank lines, writing texts | Geneva, Switzerland | receipts and entries, insofar as the AI is used |
| Railway | Runs the application, stores no accounting data | Amsterdam, Netherlands | in transit |
| Cloudflare | receives requests to bilanzi.ch and passes them on | worldwide, Cloudflare, Inc. in the USA | in transit |
| Resend | Sending emails, including those with invoices, quotes and reminders | sent from Ireland, account and logs in the USA | content of emails sent |
| Printer for letters | Printing and posting letters through Swiss Post | Switzerland | content of letters sent |
| Twilio | Receiving and delivering WhatsApp messages, only if WhatsApp is used | USA | content of the messages |
| WhatsApp (Meta) | Transmitting the messages, only if WhatsApp is used | also USA | content of the messages |
| The business’s bank (EBICS) | Bank transactions and payment files, only if connected | under the contract with the bank | bank data |
The name of the printer is in the data processing agreement, which the fiduciary reads in its account.
Only for the fiduciary’s own account
Only data of the client itself, not of its customers, is processed by Stripe (payments for the plan, Ireland and USA) and by Google and Apple (sign-in, if chosen, Ireland and USA).
Transfers to the USA
Cloudflare, Inc., Twilio Inc. and WhatsApp LLC are certified under the Swiss-U.S. Data Privacy Framework.
For Supabase, Resend and Railway the EU standard contractual clauses apply, with the adjustments for Switzerland set out in their data processing agreements.
Planned changes
No change is planned at the moment.