Cifrova Personal · Subprocessors
These are the companies that process data for us to run Cifrova, each under a data processing agreement. None of them may use the data for their own purposes.
| Provider | Role | Location | What they receive |
|---|---|---|---|
| Fintable | Bank account aggregation (open banking, PSD2) | Portugal / EU | Account names, IBANs, balances, movements, under the consent you give Fintable |
| European hosting provider | Hosting of the application and the database | EU | Everything the Service holds, encrypted at rest |
| Cloudflare | DNS, TLS termination, protection against attacks | EU points of presence; global network | Connection metadata (IP address, request headers) |
| Anthropic | AI: category proposals, summaries, the Advisor | United States (SCCs, Data Privacy Framework) | Movement lines, category names, budget and net worth summaries, Advisor questions; not used for training |
| Brevo (Sendinblue) | Transactional email: sign-in links, digests, reminders | EU | Email address, name, the content of the emails |
| Stripe | Payments, invoices, VAT | Ireland (EU) and United States (SCCs) | Email, name, billing address, payment details (which we never see) |
| Sentry (Functional Software) | Error reporting, so failures are seen and fixed | Germany (EU) and United States (SCCs, Data Privacy Framework) | Technical details of an error: page, time, browser; no bank data |
| Sign in with Google (if you choose it); visit statistics on cifrova.com (only if you accept cookies) | Ireland (EU) and United States (SCCs, Data Privacy Framework) | For sign-in: account identifier, email, name. For statistics: pages visited, shortened IP address, browser | |
| CoinGecko, Yahoo Finance | Prices of crypto and listed assets | Global | Ticker symbols only; no personal data |
Households that bring their own Anthropic key in Settings send AI data under their own agreement with Anthropic instead of ours.