Our Service Providers

Last updated:
3 November 2026

We use a small number of trusted companies to help us run Concord. This page lists each one, what it does for us, and what data it receives. It forms part of our Privacy Policy.

Every provider on this list:

  • only uses your Personal Data to provide services to us, and only on our instructions
  • is bound by a written data processing agreement that requires them to keep your data confidential and secure
  • is not permitted to sell your data, or use it for its own purposes
  • is not permitted to use your data to train AI models

We never give your immigration, case or USCIS data to providers that help us with marketing, analytics or events.

Current providers

Platform

  • Supabase: Database, sign-in and document storage. Data received: All platform data, including your documents (encrypted). Stored in: Australia (Sydney), Singapore, United States.
  • Vercel: Hosts the Concord web app. Data received: Technical data such as IP address and browser; platform data passes through. Stored in: United States, with a global delivery network.
  • Amazon Web Services (AWS): Cloud infrastructure and file storage. Data received: Platform data and documents (encrypted). Stored in: Australia (Sydney).
  • Sentry: Error and performance monitoring. Data received: Technical logs only, no case content. Stored in: United States.

Communication and documents

  • Google Workspace: Email and internal documents. Data received: Name, email address, messages and documents you send us. Stored in: Global (Google data centres).
  • PandaDoc: Electronic signatures. Data received: Name, email address, documents to sign. Stored in: United States.

Legal services

  • Crimson Talent Immigration, LLC: US legal services for United States matters (our affiliate). Data received: Your case file for US matters. Stored in: United States.

Website only (no case data)

  • Webflow: Hosts our marketing website. Data received: Website form submissions, technical data. Stored in: United States.
  • Google Analytics: Website analytics. Data received: Pages visited, device and browser data. Stored in: United States.
  • Posthog: Website analytics. Data received: Pages visited, device and browser data, app activity. Stored in: United States.
  • Ad platforms, e.g. Meta, LinkedIn, Google Ads: Website advertising. You can limit this through your browser settings or the ad platforms' own preference tools. Data received: Cookie identifiers, pages visited. Stored in: Global.

Changes to this list

We update this page when we add or replace a provider, and change the date at the top. If a new provider will receive your immigration or case data, we will email you before it starts.

Questions

To ask about any provider on this list, email contact@concordvisa.com or see section 12 of our Privacy Policy.

Concord Visa is a brand of Crimson Consulting Limited (Company Number 4957459, NZBN 9429041095355).