Sub-processors
Checked against the code: 21 September 2026The following third parties process information on CoreDocket’s behalf in order to provide the service. Each entry sets out what that provider receives and where it is processed. No other party has access to your account.
Providers marked optional receive no information unless the relevant feature is enabled on your account. Where an integration is not connected, no information is disclosed to that provider.
Supabase
Customer recordsDatabase, authentication and file storage.
- Receives
- All information held in your account, including jobs, dockets, customers, photographs, signatures and safety records
- Processed in
- Sydney, Australia
Vercel
Customer recordsApplication hosting.
- Receives
- Information in transit while pages and requests are served
- Processed in
- Sydney, Australia. Logs and the edge network operate globally
Twilio
Customer recordsoptionalJob SMS, including arrival notifications and replies.
- Receives
- Mobile numbers and the content of messages sent and received
- Processed in
- The United States, using Australian numbers
- Note
- Twilio retains its own copy of message content.
Resend
Customer recordsSending docket reports, quotes, invoices and account email.
- Receives
- Recipient name and email address, and the attached document
- Processed in
- The United States
Geoapify
Customer recordsAddress autocomplete, maps and travel times.
- Receives
- Site addresses entered into the application
- Processed in
- The European Union
- Note
- Addresses are sent to Geoapify as they are entered into an address field, not only when a record is saved.
Xero
Customer recordsoptionalTransferring invoices to your accounting system.
- Receives
- Customer name, address, contact details and invoice lines
- Processed in
- Your Xero account's own region
MYOB
Customer recordsoptionalPushing invoices into your accounting system.
- Receives
- Customer name, address, contact details and invoice lines
- Processed in
- Australia
Stripe
Account details onlyProcessing payment for your CoreDocket subscription.
- Receives
- Your billing name, email address, business address and payment details. No customer records are disclosed to Stripe
- Processed in
- The United States and Australia
- Note
- Card details are entered on Stripe's hosted checkout page and are not received or stored by CoreDocket.
Anthropic
No personal informationoptionalProducing a draft price list from a rate card you upload.
- Receives
- Price list content only. Job, customer and safety records are not disclosed
- Processed in
- The United States
- Note
- This limit is set by CoreDocket rather than by the provider. Any change to it will be published here and notified to account holders.
3CX
Account details onlyLive chat on our public marketing pages.
- Receives
- The name, email address and messages a visitor enters into the chat. Not available on signed-in screens
- Processed in
- Sydney, Australia
Google Fonts
Account details onlyTypeface used by the live chat window on our public marketing pages.
- Receives
- The visitor's IP address and browser details, as part of the font request made by the 3CX chat window
- Processed in
- Global
Microsoft Clarity
Account details onlySession recording and heatmaps on our public marketing pages.
- Receives
- Pages viewed, clicks, scrolling and mouse movement, device and browser details, and IP address, on coredocket.com.au only. Disabled on all signed-in screens
- Processed in
- Global, including the United States
- Note
- Clarity sets cookies in the visitor's browser, including a Microsoft cookie that persists for up to one year. They are listed in the Cookie Policy.
Discord
Account details onlyInternal notifications to CoreDocket staff of new website enquiries and visits.
- Receives
- The name, email address, phone number and message submitted in a website enquiry, and the page, approximate location and device type of a website visit. No customer records are disclosed
- Processed in
- The United States
Overseas disclosure
Australian Privacy Principle 8 makes us accountable for personal information disclosed overseas. Twilio, Resend, Stripe and Anthropic process information in the United States, and Geoapify in the European Union. Before disclosing personal information to any of them, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles.
All other components — the database, file storage, authentication and backups — are held in Sydney. See Security for the detail.
Changes to this list
The addition of any provider that receives personal information is published on this page at the time of the change. Where a change materially affects how personal information is handled, account holders are notified by email or within the application.