ToolPDFsToolPDFs service providers
ToolPDFs uses the providers below to operate account, payment, analytics, email, and hosted signing features. Browser based file tools have a different processing model and do not submit selected document contents to ToolPDFs application APIs.
| Provider | Purpose | Information | Locations |
|---|---|---|---|
| Supabase | Sign API database, private document storage, authentication, and account records | PDF files, names, email addresses, signature request records, document hashes, audit data, and account data | The ToolPDFs project is in Singapore. Supabase may use additional service locations through its provider network. |
| Vercel | Website hosting, application functions, API handling, delivery, and operational logs | HTTP requests, IP addresses, browser information, account and signature workflow data handled by server functions, and limited operational metadata | Current production function responses identify a United States function region. Vercel also operates a global delivery network. |
| Resend | Transactional email for signing invitations | Recipient email address, participant names, document title, invitation expiry, signing link, delivery status, and message content. ToolPDFs does not attach the PDF to these messages. | Resend states that customer data is stored primarily in the United States and may be processed by its provider network. |
| Dodo Payments | Checkout, billing, tax, receipts, refunds, and payment events | Purchase, customer, subscription, product, plan, payment status, and billing information | Processing locations depend on Dodo Payments and its service providers. ToolPDFs does not store full payment card details. |
| Account authentication and consent based analytics | Google account identifier, verified email address, available profile details, authentication data, and consent based usage data | Google operates globally. Applicable locations depend on the selected service and account settings. | |
| PostHog and Microsoft Clarity | Consent based product analytics on nonsensitive pages | Page and product interaction data, device and browser information, and network identifiers | Processing locations depend on provider terms and account configuration. ToolPDFs excludes hosted signing and API account pages from these analytics. |
International transfers
Some service data may be processed outside the European Economic Area. Where European data protection law applies, ToolPDFs must use an appropriate transfer mechanism and assess whether additional safeguards are needed. Provider contractual terms do not amount to a ToolPDFs compliance certification.
Read the Privacy Policy and Security page for more detail.
Last updated August 11, 2026.