Trust
To run Servora we rely on a small set of trusted providers ("subprocessors"). Here is every one, what it does, and what data it sees. We keep this list short on purpose.
| Provider | Purpose | Data it touches | Location |
|---|---|---|---|
| Cloudflare, Inc. cloudflare.com |
Hosting, application runtime, database (D1), file storage (R2), CDN, DNS, and TLS. Core. | Effectively all account and workspace data: profiles, projects, documents, invoices, messages, logs. | United States / global edge |
| Stripe, Inc. stripe.com |
Subscription billing and, via Stripe Connect, client and subcontractor payments. Core for paid features. | Billing contact details and payment metadata. Full card numbers go directly to Stripe and are never stored by Servora. | United States |
| Google LLC fonts.google.com |
Delivery of the web fonts used across the site and app. | The IP address and browser of visitors, as a normal part of loading a font file. | United States / global |
| 8x8, Inc. (Jitsi Meet) meet.jit.si |
Video room for booked consultation calls only. Optional, used only if you book a consult. | Your name and the live audio/video of a consult call. Not used anywhere in the core contractor app. | United States / global |
These are wired into the product but not turned on yet. We list them now so this page is never behind reality.
| Provider | Purpose | Data it touches | Location |
|---|---|---|---|
| Resend pending resend.com |
Delivery of transactional email (signature requests, receipts, password resets). | Recipient email address and the contents of the message. | United States |
| Twilio, Inc. pending twilio.com |
Opt-in SMS notifications for appointments, documents, and payments. | Phone number and the contents of the message, only for people who opt in. | United States |
Servora's core platform does not send your workspace data to any AI model and does not use it to train one. If we ever add an optional AI feature, it will be clearly labeled, opt-in, and listed here first.
We do not sell your data, and we do not share it with advertising networks.
When we add or remove a subprocessor, we update this page. If you would like to be notified of changes, reach us through the contact page and ask to be added to subprocessor notices.
Last updated July 27, 2026.