Effica sub-processors
Last updated: 8 July 2026
Effica is operated by AI Core CRM Pty Ltd. To deliver our platform we engage a small set of carefully selected sub-processors. This page gives customers and app-store reviewers a plain summary of the main external services that may process Effica customer data on our behalf.
Why this list exists
Transparency about who processes participant and worker information is a core part of our commitment to NDIS providers. This page lists every external service that may handle Effica customer data on our behalf and the purpose for which each is engaged. It is maintained alongside our Privacy Policy and Terms of Service.
Current sub-processors
| Sub-processor | Purpose | Processing location | Security information |
|---|---|---|---|
| Supabase Inc. | Database, authentication, and file storage infrastructure. | Australia (Sydney) | Provider trust page |
| Vercel Inc. | Application hosting and content delivery for the Effica web app. | Australia (Sydney) | Provider trust page |
| Resend | Transactional email delivery for account invites, signing notifications, and system alerts. | United States | Provider trust page |
| OpenAI, L.L.C. | AI processing for selected Effie assistant and extraction features, only when a provider enables them. | United States | Provider trust page |
Where your data is hosted
Effica's application and its primary database, file storage, and authentication run in Australia (Sydney). Your operational records are stored in Australia. Two sub-processors operate outside Australia, shown in the table above: email delivery (Resend) and, only when AI features are enabled, AI processing (OpenAI) — both in the United States.
AI processing
Some Effica features use AI to support summarisation, drafting, extraction, and assistant workflows. These features are optional, controlled by the provider's settings, and governed by Effica access controls. When they are used, the relevant content is processed by OpenAI in the United States. OpenAI does not use data submitted through its API to train its models, and Effica does not sell customer data or use customer operational records for third-party advertising. Effica is also rolling out additional controls that remove direct identifiers — such as names, dates of birth, NDIS numbers, and financial details — from content before it is sent for AI processing.
Questions or objections
For questions about this list, to request a copy of a Data Processing Agreement, or to raise an objection to a proposed sub-processor change, contact us at info@effica.com.au.