Placeholder · current Phase 1 list
Sub-processors
Appraisal Report Audit, a Product of Edge Realty Advisors.
Last updated: 2026-06-02.
Appraisal Report Audit relies on the following third-party service providers (“sub-processors”) to operate. Each sub-processor is bound by a data processing agreement and is permitted to process data only as needed to deliver the Service to us. Adding or removing a sub-processor triggers a Privacy Policy update with at least 14 days' notice, per our Privacy Policy.
| Sub-processor | Purpose | Handles NPI? | Agreement |
|---|---|---|---|
| Anthropic, PBC | LLM API: primary audit model that generates findings from uploaded reports | Yes (prompt body containing Customer Content) | Accessed via Vercel AI Gateway under zero data retention (no training; no retention after response) |
| OpenAI, L.L.C. | LLM API: second-pass verification of findings (and optional primary audit model) | Yes (prompt body containing Customer Content) | Accessed via Vercel AI Gateway under zero data retention (no training; no retention after response) |
| Cloudflare R2 | Object storage: input PDFs, output Word documents, voice corpora | Yes (file payloads, encrypted at rest) | Cloudflare standard DPA |
| Supabase | Application database: accounts, jobs, findings, billing records | Yes (extracted fields) | Supabase DPA |
| Vercel | Web hosting and AI Gateway: serverless runtime plus the zero-data-retention model router for all AI inference | Transient (request bodies and model prompts in flight) | Vercel DPA; AI Gateway zero-data-retention configuration |
| Railway | Background worker compute: PDF text extraction, audit and verification model calls, Word document generation | Yes (report content processed during the audit) | Railway DPA |
| Clerk | Authentication and user identity | No file content; account metadata only | Clerk DPA |
| Stripe | Payments and subscription billing | No file content; payment data only | Stripe DPA |
| Resend | Transactional email (job-complete, billing, account) | Recipient address and non-NPI body text only; no attachments | Resend DPA |
| Sentry | Error and exception monitoring | Scrubbed; PII/NPI filters configured | Sentry standard DPA |
| PostHog | Product analytics (loaded only after cookie consent) | Scrubbed; PII/NPI filters configured | PostHog standard DPA |
Hosting region
All sub-processors operate primarily in the United States. Some (Cloudflare, Vercel) operate globally and may route requests through edge nodes outside the U.S. for performance; durable storage of Customer Content remains in U.S. regions.
No training on Customer Content
AI inference is routed through the Vercel AI Gateway, which is configured to send requests only to model providers operating under zero-data-retention agreements (currently Anthropic and OpenAI). Under those agreements, Customer Content is not used to train models and is not retained after the response is returned. No other sub-processor receives Customer Content for training purposes.
Questions
Contact privacy@appraisalreportaudit.com.