المعالجون من الباطن
نستعين بالشركات أدناه لتشغيل OneBooks. ونُشعرك قبل 30 يومًا على الأقل من إضافة أي منها أو استبدالها، فيمكنك الاعتراض أولًا. وتُولَّد هذه الصفحة من السجل الذي يستخدمه المنتج فعليًا، فلا يمكن أن تتخلّف عنه بصمت.
Neon
Hosts the PostgreSQL database in which all customer records are stored.
- تتم المعالجة في
- European Union (eu-central-1)
- مستخدم منذ
- 2025-01-01
- البيانات التي يمكنهم الوصول إليها
-
- Every category of personal data in the service
- Account details, accounting records, contacts, attachments metadata
- النقل خارج المنطقة الاقتصادية الأوروبية
- None required for the primary store — data stays in the EU. Neon is additionally certified under the EU–US Data Privacy Framework.
Cloudflare
Runs the application, the APIs and the public sites, and provides the network and DDoS protection in front of them.
- تتم المعالجة في
- Global edge network; US-headquartered
- مستخدم منذ
- 2025-01-01
- البيانات التي يمكنهم الوصول إليها
-
- Data in transit for every request
- IP addresses and request metadata
- Uploaded files held in object storage
- النقل خارج المنطقة الاقتصادية الأوروبية
- Standard Contractual Clauses, in Cloudflare’s customer Data Processing Addendum.
Stripe
Takes subscription payments and issues receipts.
- تتم المعالجة في
- United States and Ireland
- مستخدم منذ
- 2025-01-01
- البيانات التي يمكنهم الوصول إليها
-
- Billing name and email
- Billing country and currency
- Payment and subscription status
- النقل خارج المنطقة الاقتصادية الأوروبية
- Certified under the EU–US Data Privacy Framework, its UK extension and the Swiss–US DPF. Card details never reach our systems.
Resend
Delivers transactional email: verification, password resets, and the invoices and quotes a customer chooses to send.
- تتم المعالجة في
- United States
- مستخدم منذ
- 2025-01-01
- البيانات التي يمكنهم الوصول إليها
-
- Recipient email address
- Message subject and body, including any attached document
- النقل خارج المنطقة الاقتصادية الأوروبية
- ⟨TO BE COMPLETED BY THE CONTROLLER⟩ — confirm and file Resend’s DPA and transfer mechanism.
Google الموقع العام وشاشات التسجيل
Measures public website visits and completed app signups with analytics consent; attributes signups to Google Ads only with separate ad measurement consent.
- تتم المعالجة في
- United States
- مستخدم منذ
- 2025-01-01
- البيانات التي يمكنهم الوصول إليها
-
- Pseudonymous analytics identifier
- Public pages viewed
- Signup method
- Ad click identifiers with consent
- Approximate location from IP
- النقل خارج المنطقة الاقتصادية الأوروبية
- EU–US Data Privacy Framework. Consent Mode v2: analytics and ad measurement follow separate choices; ad personalisation is always denied. No names, email addresses or accounting data are sent.
Anthropic
Provides the AI model that writes the assistant’s answers, in chat and in voice calls, when it is enabled as a model provider.
- تتم المعالجة في
- United States
- مستخدم منذ
- 2026-10-17
- البيانات التي يمكنهم الوصول إليها
-
- The question the user types, or the transcript of what they say
- Accounting data the assistant reads to answer it, and any image the user attaches (such as a scanned receipt)
- The assistant’s replies
- النقل خارج المنطقة الاقتصادية الأوروبية
- ⟨TO BE COMPLETED BY THE CONTROLLER⟩ — confirm Anthropic’s transfer mechanism, sign and file its DPA, and record the Art. 35 DPIA for the assistant.
ElevenLabs
Runs voice calls with the AI assistant in the mobile app: turns the user’s speech into text and the assistant’s answers into speech.
- تتم المعالجة في
- The data-residency region of our ElevenLabs account; United States by default. The service calls the global endpoint api.elevenlabs.io.
- مستخدم منذ
- 2026-10-17
- البيانات التي يمكنهم الوصول إليها
-
- The user’s voice during a call
- Transcripts of the call
- The assistant’s spoken answers, which can include figures from the accounting data
- النقل خارج المنطقة الاقتصادية الأوروبية
- ⟨TO BE COMPLETED BY THE CONTROLLER⟩ — confirm ElevenLabs’ transfer mechanism and sign and file its DPA.
⟨TO BE COMPLETED BY THE CONTROLLER⟩ — other AI model providers
Answers questions the AI assistant is asked, using the accounting data retrieved to answer them.
- تتم المعالجة في
- ⟨TO BE COMPLETED BY THE CONTROLLER⟩
- مستخدم منذ
- 2026-09-01
- البيانات التي يمكنهم الوصول إليها
-
- The question the user types
- Accounting data retrieved to answer it
- النقل خارج المنطقة الاقتصادية الأوروبية
- ⟨TO BE COMPLETED BY THE CONTROLLER⟩ — name every provider enabled in AI_PROVIDER_ORDER besides Anthropic (the order used when it is unset is OpenAI, Cloudflare Workers AI, Google Gemini), confirm each one’s transfer mechanism, and record the Art. 35 DPIA. The assistant is available on every tier, including Free, so this is not an edge case.
من ليس في هذه القائمة
يسأل العملاء عن هؤلاء، فهذا هو السبب بدلًا من الصمت.
- Shopify, Square, Clover, Lightspeed, Loyverse — A sub-processor is one WE engage to process on your behalf. You connect your own POS account and the data flows to us from it. They are a source of your data, not a processor we chose.
- ZATCA and other tax authorities — A recipient under your own legal obligation to file, not a processor acting on our instructions.
- Our logging and monitoring — Self-hosted on infrastructure we operate. No third party receives the data, so there is nothing to disclose or object to.