Subprocessors
The vendors that touch your data, and what each one does.
Restomo runs on a small number of vendors. Each one is listed here with what it does and where it handles your data, and we tell every company before we add or replace one.
Updated October 1, 2026
01How to read this page
These are the vendors that handle your data so Restomo can run, with what each one does and what it receives. When we add or replace one, we update this page and email the Owner of every company at least 30 days before the change takes effect, as the data processing agreement describes.
Amazon Web Services
It runs Restomo and the website: the servers, the database, file storage for photos, videos, scans and documents, sign-in (Amazon Cognito), email (Amazon SES), iPhone notifications (Amazon SNS), room scan processing, maps, addresses and drive times (Amazon Location Service), and speech to text when someone talks to Romo on the website (Amazon Transcribe).
Where: United States
Amazon Bedrock
It runs the AI models Romo uses, Claude by Anthropic, GLM by Z.ai and Nova by Amazon, inside Restomo's own Amazon Web Services account. It does not share what Romo sends with the companies that made the models, and nothing is used to train a model.
Where: United States
Stripe
It takes your company's card payment and runs the monthly subscription. Restomo never receives the full card number.
Where: United States
Apple
It delivers notifications to iPhones and to Safari, and distributes the iPhone app.
Where: Apple's notification service
Google
It provides Google Calendar and Gmail to the people in your company who connect their own Google account, and only for what they connect. It also delivers browser notifications to Chrome and Android, encrypted so Google cannot read them.
Where: Google's services
Mozilla
It delivers browser notifications to Firefox, encrypted so Mozilla cannot read them.
Where: Mozilla's notification service
komoot (Photon)
It suggests addresses as someone types a customer's address. It receives the typed part of the address and your company's map area.
Where: May be outside the United States
Composio
It connects the apps a person chooses to connect to Romo, such as Gmail, Slack or HubSpot. It holds that person's sign-in for each app, and it passes Romo's requests and the app's answers. Nothing is connected unless a person connects it.
Where: Composio's connection service
DuckDuckGo
It answers Romo's web searches for general facts. It receives the search words, which never include a name, address, phone number or claim number from your records, and an admin can turn web search off.
Where: DuckDuckGo's search service
Sentry
It collects error reports from the web app when error reporting is switched on, set so that it is not sent personal details.
Where: Sentry's error service
The agreement these sit under is the data processing agreement.