This is a translation provided for convenience. For Offices in Israel, the Hebrew version is binding.
Subprocessor List — CPAADV Flow
Version 1.0 · Last updated: 12 October 2026
This list sets out the providers that HI ACCOUNT LTD (היי אקאונט בע״מ), the operator of CPAADV Flow, uses to provide the Service, their role and their main processing location. Changes to the list are notified in advance as described in the Data Processing Agreement.
Subprocessors processing Office and End Client data
| Provider | Service | Main location |
|---|---|---|
| Supabase, Inc. | Database and user authentication | European Union (Frankfurt, Germany) |
| Railway Corp. | Application hosting | European Union (Amsterdam, Netherlands) |
| Cloudflare, Inc. | Document storage (R2) | European Union (EU jurisdiction) |
| Cloudflare, Inc. | Domain name services, traffic delivery and protection | Global network |
| Resend, Inc. | Operational email (such as team invitations): recipient address and message content | Sending from the European Union (Ireland); company based in the United States |
Providers acting as independent parties
| Provider | Service | Note |
|---|---|---|
| Cardcom | Payment processing, payment method storage and tax invoice/receipt issuing | Processes the Office's payment details only, and also acts under the law governing payment processing and its own terms |
| Google LLC | Sign-in with a Google account | Applies to Office users only, under Google's terms |
These providers do not receive End Clients' documents.