Sub-processors

Last updated July 5, 2026 · Chronox is operated by Foundation Digital LLC. This is the complete, current list of third parties that process customer data on our behalf.

Every sub-processor below is bound by contract to process data only to provide its service to Chronox — never for its own purposes, never for advertising, and never to train its own models on your workforce's data. Vendors marked biometric path can touch biometric identifiers; all others are contractually and architecturally outside the biometric path.

Biometric path

Sub-processor	Service	Data touched	Location
Amazon Web Servicesbiometric path	Face matching & anti-spoofing (Rekognition, Face Liveness)	Transient face images at punch/enrollment, face-geometry descriptors (one isolated collection per customer company), liveness check streams	us-west-2 (Oregon, USA)
Supabasebiometric path	Database, storage, authentication, edge functions	All application data, including encrypted (AES-256-GCM) offline face-template ciphertext, consent records, punch records, deletion receipts	USA
Neurotechnologyon-device only	VeriLook face-matching SDK for offline mode	None. The SDK runs entirely on the device; no data ever flows to the vendor. Listed for transparency.	Vendor: Lithuania · Processing: on your devices

Non-biometric services

Sub-processor	Service	Data touched	Location
Cloudflare	Web hosting & CDN (app.chronoxapp.net and this site), bot protection	Application traffic in transit (TLS), standard connection logs. No stored biometric data.	Global edge; USA
Google (Firebase)	Push notifications; Google Sign-In where a worker chooses it	Device push tokens, notification payloads (e.g., timesheet reminders); for Google Sign-In, name/email from your Google account. No biometric or GPS data.	USA
Mapbox	Reverse geocoding of punch coordinates	Punch-moment GPS coordinates only — sent without names or identifiers attached	USA
Stripe	Billing	Company billing details and usage counters. No employee, biometric, or punch data.	USA
Anthropic	AI features (Chronox AI summaries & assistance)	Timekeeping, project, and task content a user submits to the assistant — text and any images the user attaches (e.g., receipts, delivery tickets). Never face templates or any biometric identifier; API data is not used to train Anthropic's models per our commercial terms.	USA
OpenAI	AI features (document extraction, embeddings, some assistant tasks)	Same scope as Anthropic: user-submitted text and attached document images. Never face templates or any biometric identifier; API data is not used for model training per OpenAI's API terms.	USA
Resend	Transactional email (invites, password resets, notices)	Recipient name/email and the message content	USA
Twilio	Transactional SMS (invites, alerts)	Recipient phone number and the message content	USA
Check Technologies	Embedded payroll — only if your company enables Chronox Payroll	Payroll onboarding and processing data your company supplies on Check's hosted flows (bank details, withholdings, tax forms), plus hours/earnings for pay runs. No biometric data.	USA
Sentry	Crash & error reporting	Technical diagnostics; configured not to send personal data by default (`sendDefaultPii=false`). No biometric data.	USA

Employer-directed integrations (not sub-processors)

When your company connects its own accounts to export payroll or accounting data — Gusto, QuickBooks (Intuit), Square, BambooHR, OnPay — Chronox transmits the data your company selects to the provider your company chose, at its direction. Those providers process that data under your company's agreement with them, not as Chronox sub-processors. Voice entry is transcribed on your device by your phone's operating system; the audio is not sent to a Chronox vendor.

Changes to this list

Before adding or replacing any sub-processor that can touch biometric identifiers, we update this page and give customers 30 days' advance email notice with the right to object, per our Data Processing Addendum. Other sub-processor changes are posted here promptly. To receive change notifications, email privacy@chronoxapp.net with the subject "Sub-processor updates".