Service providers
Last updated September 26, 2026
These are the companies that process information on our behalf to run MendTag. Each receives only what it needs for its task, and uses it only to provide that service to us. How we handle your information overall is set out in our Privacy Policy.
Supabase
Database, sign-in and file storage
Everything stored in MendTag: accounts, company details, customer and equipment records, service jobs, photos, reports and signatures.
Vercel
Hosting the application and counting page views
Requests to the app as they pass through, and standard server logs such as IP address, browser type and time of request. It also counts page views on the public website: which page, the rough region the request came from and the kind of device, with no cookie, no lasting identifier and nothing that identifies a person.
Anthropic
Drafting reports and reading equipment data plates
A technician's notes, when a report is drafted, and a photo of a data plate, when one is scanned. Under its commercial terms Anthropic does not use this data to train its models.
Deepgram
Transcribing voice notes
The audio of a voice note, to turn it into text. We have opted out of Deepgram's model improvement program, so recordings are not used to train its models and are kept only as long as needed to transcribe them.
Stripe
Taking subscription payments
Your name, email address and card details, which you enter on Stripe's own payment page. Card numbers go to Stripe directly and never reach our servers — we are told only the card's brand and last four digits, and whether your subscription is paid, overdue or cancelled.
Microsoft (OneDrive)
Holding an off-site backup copy
A copy of the files stored in MendTag — equipment and data plate photographs, issued report PDFs and customer signatures — and, when one is taken, a copy of the database. Copies are made so that information can be restored if it is ever lost, and are read only for that purpose.
Resend
Sending email
The recipient's address and the content of emails we send: account emails such as password resets, and service reports sent to customers, including the attached PDF.
NHTSA vPIC
Looking up a vehicle's year, make and model from its VIN
Only the VIN, and only when a technician looks one up. No customer, company or account details are sent. vPIC is a free public database run by the U.S. National Highway Traffic Safety Administration.
Porkbun
Domain name and email forwarding
Messages sent to our support address, as they are forwarded to us.
Websites you choose to open
Some features take you to other websites at your request. These companies are not our providers: we send them nothing, and whatever you do there is covered by their own policies.
- Web search. Searching for a scanned barcode opens DuckDuckGo, and the value you searched for is sent to it.
- Links in scanned codes. A QR code on a piece of equipment may link to its manufacturer or anyone else. We show you the address before you open it.
Changes to this list
When we add or change a provider we update this page and the date at the top. Questions about any provider can go to support@mendtag.com.