Subprocessors
These are the service providers that process personal information for KitFiler Money, what each one receives and why. We update this page before adding a new subprocessor that receives customer data. Accountants using client workspaces can rely on this list under our Data Processing Agreement.
| Provider | Purpose | Data it receives | Location |
|---|---|---|---|
| Anthropic, PBC (Claude API) | AI Bookkeeper: reading forwarded documents and emails, answering questions, category suggestions, reading replies to AI summaries, website chat | Document and email contents you send to the AI inbox (masked for SSNs, card and long account numbers where text); your questions with a summary of the workspace's books; payee names, descriptions, amounts and category names; website chat messages. Not used to train Anthropic's models under its commercial terms. | United States |
| Plaid Inc. | Bank connections (read-only) | Your bank sign-in happens on Plaid; Plaid sends us accounts, balances and transactions. See the Plaid End User Privacy Policy. | United States |
| Amazon Web Services, Inc. (SES, S3, SNS) | Receiving email at @ai.kitfiler.com (raw mail kept 90 days), sending email | Inbound email contents; outbound email recipient, subject and body | United States (us-east-1) |
| Stripe, Inc. | Subscriptions and payments | Workspace ID, billing contact email; card details are entered directly on Stripe | United States |
| Google LLC | "Sign in with Google" (only if you choose it) | Sign-in request; Google returns your name, email and account ID | United States |
| Hosting (KitFiler-managed Windows server) | Runs the application, database and file storage | All service data | [Data-center provider and region: owner to confirm] |
Public data services (no account data)
For crypto wallets you add, we send only the public wallet address to blockchain data services to read its public history: mempool.space and Blockstream (Bitcoin), Blockscout or Etherscan (Ethereum, Base, Arbitrum, Polygon) and a Solana RPC provider. Coinbase's public price API receives only asset symbols and dates. These services receive no other personal information.
Questions
Email admin@kitfiler.com.