Who processes your data
STABO does not do all of this alone. 7 companies are involved in the portal working, and each one is named here with what actually reaches it. Documents you upload are read by OpenAI; your verification is run by Sumsub.
The database, sign-in and document storage behind the portal.
Your account and password credential, the company profile, the people you name, and every file you upload — held in a private bucket that is not readable without a signed link.
Reads an uploaded document, says what it is, and proposes profile answers.
The contents of the documents you upload — including any personal details printed on them, such as a passport page — sent as the file itself, one document per request.
When you upload a document.The alternative document reader, used in place of OpenAI where configured.
The same document contents as above. Only one of the two ever receives a given file.
Not in use on this deployment. Listed because it is the configured alternative and would be disclosed here before any document reached it.
Typesafe AI (JEV)
To be confirmed.
Suggests which CRS tax classification fits the company, from the answers already in its profile. The suggestion is a starting point — the company chooses.
Profile answers about the company: its name, addresses, what it does, where its money comes from and its tax details. Not documents, and not anything about named people.
When you ask for a CRS classification suggestion.Runs the identity and company verification when you proceed to onboarding.
The company profile, the people you have named with their roles and identity details, and the documents relevant to the check — sent once, when you confirm.
When you press Proceed to Onboarding.Hosts and serves the portal.
Request metadata — IP address, browser, the pages you open. Not the contents of your profile or your files, which pass through in transit and are not stored here.
Sends the mail the portal sends — verification, invitations, password resets.
Your name and email address, and the contents of those messages.
What this list is for
Each company here acts on STABO's instructions and only for the purpose beside its name. None of them is permitted to use your company's information for its own purposes, and none of them is sold or given access to it for advertising or resale.
One row may say it is not in use: STABO configures a single primary document reader, and the other candidate for that job stands by without receiving anything. Everything else here is live.
STABO will update this page before adding a company to it. If a change would move where your documents are read or your verification is run, account owners are told by email rather than left to notice the page changed.
The full picture — what STABO collects, how long it is kept, and what you can ask for — is in the Privacy Notice.