MDMSDEALER MANAGEMENT SYSTEM
Legal

Sub-processors

Last updated: 7 November 2026

Modern DMS (ABN 32 737 926 202) uses the providers below to run ModernDMS. This page lists each one that handles Customer Data, what it does and where. A sub-processor is an outside company that handles your data for us. It sits alongside our Privacy Policy (sections 5 and 5A) and Terms. This page is information, not legal advice.

Providers every customer uses

  • Supabase, Inc.

    What it does
    Database, sign-in, file storage and the server functions that run the Service.
    Customer data involved
    All Customer Data you and your team enter, and uploaded files.
    Where
    Sydney, Australia (AWS ap-southeast-2).

  • Netlify, Inc.

    What it does
    Hosts and delivers the ModernDMS web app and this website.
    Customer data involved
    Page requests and the data shown in your browser pass through its delivery network. It does not store your database.
    Where
    Global delivery network, including the United States.

  • Microsoft Corporation (Azure)

    What it does
    Encrypted off-site copies of our database, kept as a safeguard against data loss.
    Customer data involved
    Encrypted backups of the database and file storage.
    Where
    Australia East (New South Wales), Australia.

  • Resend, Inc.

    What it does
    Sends email from the Service, such as sign-in codes, notices, quotes and invoices you send.
    Customer data involved
    Recipient email address, message content and attachments of emails you ask the Service to send.
    Where
    United States.

AI features

These providers only receive data when a person uses an AI feature. Which information is removed before sending, and what we cannot promise, is set out in Privacy Policy section 5A.

  • Anthropic, PBC

    What it does
    Claude models that write replies for MDMS AI.
    Customer data involved
    A user's question and the business information needed to answer it, limited to what that user's role may see, after the removal described in Privacy Policy section 5A. Some features remove less than others, and calls made directly to Anthropic have no zero-retention arrangement.
    Where
    United States.

  • OpenRouter, Inc. and the model providers it routes to

    What it does
    Routes requests to AI models for the help assistant, the AI drafting helpers, Smart import and the website chat.
    Customer data involved
    The text of the request after the removal described in Privacy Policy section 5A. For Smart import, column names and value shapes, or pasted parts and machine lists.
    Where
    United States and other countries, depending on the model provider.

  • Voyage AI, Inc.

    What it does
    Matches help questions to help articles.
    Customer data involved
    The text of a help question after the removal described in Privacy Policy section 5A.
    Where
    United States.

Providers used only when your business turns a feature on

  • Stripe, Inc.

    What it does
    Card payments and subscriptions, and card payments your business takes through ModernDMS where you connect Stripe.
    Customer data involved
    Payment details entered at checkout (we do not store full card numbers), payer name and email, amounts.
    Where
    United States and other countries.

  • Xero Limited

    What it does
    Accounting sync, when your business connects Xero.
    Customer data involved
    Contacts, invoices, bills and payments exchanged with your Xero organisation.
    Where
    As set by Xero for your organisation.

  • Microsoft Corporation (Microsoft 365)

    What it does
    Outlook mail and calendar connection, when your business connects it.
    Customer data involved
    Mail and calendar items from the mailboxes your users connect.
    Where
    As set by your own Microsoft 365 tenant.

  • OpenStreetMap Foundation (Nominatim)

    What it does
    Turns customer addresses into map positions for the customer map.
    Customer data involved
    Customer street addresses sent for lookup.
    Where
    Hosted in Europe and the United Kingdom.

  • Google LLC (Google Maps)

    What it does
    Address lookup for the customer map, only if we switch to it from OpenStreetMap, which is our default.
    Customer data involved
    Customer street addresses sent for lookup.
    Where
    Global.

  • Browser push services (Apple, Google, Mozilla)

    What it does
    Deliver browser notifications to users who switch them on.
    Customer data involved
    Notification text and a device address for the browser.
    Where
    Global.

How we manage sub-processors

  • We choose providers that publish security and privacy terms and give them only the data a feature needs.
  • Your database is held in Sydney. Providers outside Australia receive only what their feature needs, as described above and in Privacy Policy section 5.
  • We do not sell Customer Data.

Changes to this list

When we add or replace a provider that handles Customer Data, we update this page and email the administrator of each customer account at least 30 days before the new provider receives Customer Data, so you can raise a concern. Email customersupport@moderndms.com.au to ask to be told by email.

Data Processing Agreement

If your business needs a signed Data Processing Agreement (DPA), email customersupport@moderndms.com.au and a person will reply within one business day. Our DPA covers what we do with Customer Data on your behalf, security, breach notice, sub-processors, overseas disclosure, and return or deletion at the end of the contract.

Modern DMS
Queensland, Australia
customersupport@moderndms.com.au