Generated from the processor register on 2026-10-20 (integration markers and operating records).
Application integrations are checked against shipped software; services used outside the application are supported by dated operating records.
Processors of personal data
Third parties that process eznest users' personal data on our behalf.
| Vendor | Purpose | Data categories | Processing | Storage | Status |
|---|---|---|---|---|---|
| Google Workspace (Gmail) | Hosting eznest.ca business mailboxes, including privacy@eznest.ca and support@eznest.ca: receiving correspondence and attachments, keeping mail, and sending staff replies. Separate from the application's AWS SES transactional relay. | name; email; email_content; uploaded_documents | Global, including the United States; account-specific region restriction not verified | Global, including the United States; account-specific region restriction not verified | live |
| Amazon Web Services | Object storage (S3), transactional email relay (SES), and eznest AI inference (Bedrock). | uploaded_documents; bank_statement_files; email_content; ai_prompts_and_context | ca-central-1; us-east-1 / us-east-2 / us-west-2 (Bedrock inference, cross-region us.* profiles) | ca-central-1 | live |
| Stripe | Card payments; Stripe-hosted embedded provider onboarding and account management; connected-account payouts (Stripe Connect). | payment_card; name; email; identity_and_verification_information; payer_bank_account; payout_bank_account; transaction_amounts | us | us | flag_off |
| Clerk | Front-door identity and authentication (verify Clerk token, then eznest issues its own session). | email; name; authentication_events; ip_address | us | us | live |
| RFC 3161 timestamp authority | Independent trusted timestamp on signed agreements (P1-029). eznest operates the platform where these agreements are signed and is not a party to them, but any fee eznest takes is set out in the agreement's own terms, so a "signed at" eznest records is a claim by an interested operator; the authority's token is not. | signature_digest | us | us | live |
| Apple Push Notification service | iOS push notification delivery. | device_token; notification_payload | us | us | live |
| Firebase Cloud Messaging (Google) | Android push notification delivery. | device_token; notification_payload | us | us | flag_off |
| Twilio (SMS) | Text messages about visits to a homeowner's home, and the inbound replies that stop them. | phone_number; message_body | us | us | live |
| Google Places / Maps Platform | Homeowner address-entry suggestions/details in the website's Add a home and new-project forms; provider-initiated lookup of the provider's own business listing and live rating; visitor-initiated map of a public business page; live rating of an unclaimed business listing for a signed-in homeowner. | address_text; ip_address | us | us | live |
| Intuit QuickBooks Online | Accounting sync, only for a business whose owner or admin connects its own QuickBooks Online company. Once switched on, and only when the business starts a sync, eznest's server in Canada sends Intuit, for each milestone charged by card in the chosen year: the household's name as a QuickBooks customer, and an invoice with the project's request text and milestone title, the pre-tax amount, the charge date and an eznest reference. No street address, email address or phone number is sent. Intuit returns sign-in tokens, the company id and its record ids. A business disconnects on the Accounting page of the website: eznest asks Intuit to cancel its access and deletes its saved sign-in and its record of what was sent; what Intuit already holds stays in the business's own QuickBooks company. | provider_business_financials; invoice_line_items; customer_names | us | us | flag_off |
| Google Calendar | Busy times from a business's own Google Calendar, when an owner or admin connects it, so eznest does not offer times the business is already booked elsewhere. | calendar_availability; oauth_tokens | chosen by the business's own Google account | chosen by the business's own Google account | flag_off |
| Microsoft published calendar link | Busy times from the free/busy calendar link a business publishes from Outlook and pastes into eznest, so eznest does not offer times the business is already booked elsewhere. | calendar_availability | chosen by the business's own Microsoft account or tenant | chosen by the business's own Microsoft account or tenant | flag_off |
| Voyage AI | Text embeddings for eznest AI retrieval (production embedding provider option). | user_content_for_embedding | us | us | flag_off |
| OpenAI | Optional frontier LLM adapter for eznest AI (not the default; Bedrock/Ollama are). | ai_prompts_and_context | us | us | flag_off |
| Open-Meteo | Home weather forecast, and the storm watch's city lookup. When the Home weather card shows a forecast, eznest's server sends Open-Meteo's geocoding service the home's city (the city name only, and only when it has not already looked that city up), then sends its forecast service the latitude and longitude the geocoder returned for that city, unless a forecast from the last 30 minutes is already held. Adding one of the card's weather alerts as a to-do reads the forecast again the same way, so it also sends the city name (only when not already looked up) and the city's coordinates, unless a recent forecast is cached. A provider's storm watch for one of its business service areas sends the geocoding service that service area's city (the city name only) to find the point whose federal snow observations it reads; that path calls no Open-Meteo forecast. No account identifier, name, street address or browser address is sent, and the province never leaves eznest's server (it is used only locally to pick the Canadian match). | home_location | ch; eu; us | ch | live |
Public data sources
Read-only public/reference data. No eznest user personal data is sent — listed for transparency.
| Source | Purpose | Region |
|---|---|---|
| OpenCorporates | Company-registry legitimacy enrichment for prospect providers (public business data). | uk |
| OpenStreetMap / Nominatim (OSMF) | Fallback geocoding of address text. | uk; eu |
| Government of Canada / City of Toronto open data | Business collection (StatsCan ODBus), product recalls, municipal datasets — all public data reads. | ca |
| Overture Maps Foundation | Open places dataset for the business/provider directory (batch ingest; no user PII sent). | us |
| Foursquare (Open Source Places) | Open places dataset (Ontario home-services slice) for the business directory; batch ingest, no user PII. | us |
| OpenStreetMap Overpass API (community mirrors) | Query OSM place/business data for the directory (no user PII sent). | eu |
| U.S. Consumer Product Safety Commission | Public product-recall data (safety alerts). Public data reads; no user PII sent. | us |
Regulator lookups
| Regulator | Purpose | Region |
|---|---|---|
| Home Construction Regulatory Authority (Ontario) | No current lookup. Eznest records and shows the licence number supplied by the business. | ca |
| Electrical Safety Authority (Ontario) | No current lookup. Eznest records and shows the licence number supplied by the business. | ca |