Legal

Subprocessors

Effective October 10, 2026

A subprocessor is a company EMS Matrix uses to run the Service, for example by hosting the database, sending email or delivering a push notification, and which may handle an agency's data on our behalf while doing that job. This list is kept current. It is also summarized in the Privacy Policy, section 7, "Who we share it with."

Provider Purpose Location
Supabase (on Amazon Web Services) Database, sign-in, file storage United States (Virginia)
Render Application hosting United States (Ohio)
Cloudflare Domain, network security, content delivery, and bot checks on public forms Global network
Resend Email delivery United States
Expo (relayed by Apple and Google) Push-notification delivery United States
Sentry Error and crash reports: error details, device, browser and app version, page path, and a random internal account and agency ID. Screenshots, session recordings and request contents are turned off. United States
Anthropic AI-assisted software development and debugging (Claude Code); read-only access to limited agency account data when investigating issues United States
OpenAI AI-assisted software development and debugging (Codex); read-only access to limited agency account data when investigating issues United States

Your agency's own payroll provider is not on this list. EMS Matrix never connects to or sends data to a payroll provider directly. Administrators download an export file and send it themselves.

We will post changes to this list here before a new subprocessor begins processing Agency data.

Questions about this list: support@emsmatrix.com

← Back to all legal documents