Supabase Pte. Ltd.
- Service and purpose
- Primary database, authentication, file storage, and realtime infrastructure.
- Main processing boundary
- Sydney region for the Effica project; provider support and service metadata may involve other locations
Effica sub-processors
Last updated: 19 August 2026
Effica is operated by AI Core CRM Pty Ltd. The suppliers below may process personal information on our behalf to deliver and support the platform. Locations describe the relevant service configuration or provider processing boundary; they are not a claim that every support, log, network, or delivery activity occurs only in that location.
Effica is independent provider-management software for provider operations. It is not the NDIA or the NDIS Quality and Safeguards Commission, is not NDIS approved or endorsed by either agency, and is not a participant-provider marketplace. Effica may process claim and billing records for a provider, but does not hold or process NDIS plan funds as an intermediary. The customer provider remains responsible for its participant relationships, services, authorisations, regulatory and claim decisions, and submissions.
Where limited information is processed outside Australia, Effica uses the service only for the purpose listed below and applies data minimisation, contractual protections, access controls, and security safeguards appropriate to the information and risk.
Platform sub-processors
Google Cloud
- Service and purpose
- Web application hosting, regional load balancing, dynamic compute, background job scheduling, task delivery, and worker execution.
- Main processing boundary
- Sydney (australia-southeast1) for configured application and background processing; provider support and service metadata may involve other locations
Plus Five Five, Inc. (Resend)
- Service and purpose
- Transactional email delivery, which may process recipient addresses, generic or service-message content, links or codes, and delivery metadata.
- Main processing boundary
- United States
OpenAI OpCo, LLC
- Service and purpose
- Optional AI assistance for drafting, summarisation, information extraction, and related workflows started by authorised users.
- Main processing boundary
- United States
650 Industries, Inc. (Expo)
- Service and purpose
- Push delivery. Expo receives only a device push token, generic alert, opaque notification ID, and delivery metadata; notification details remain in Effica.
- Main processing boundary
- United States
Google Maps Platform
- Service and purpose
- Maps, geocoding, location display, and typed address or place suggestions.
- Main processing boundary
- Global Google Maps services
Customer-directed integrations
These services receive information only when a customer connects or uses the integration. The customer authorises the transfer and also has a direct account or relationship with the integration provider.
- Xero: A customer-enabled accounting and payroll connection that may exchange contacts, invoices, financial reports, worker mappings, timesheets, and encrypted connection credentials.
- Employment Hero Payroll / KeyPay: A customer-enabled payroll connection that may exchange worker mappings, payroll reference data, and approved timesheet lines.
Sales, billing, and business services
The following services process provider business, enquiry, or subscription information rather than ordinary participant care records:
- Stripe: Effica provider signup and SaaS subscription billing, including related business contact and transaction metadata. This is Effica's own subscription charging; Stripe does not process NDIS plan funds for Effica.
- HubSpot: Contact and demo forms, prospect communications, and provider commercial account lifecycle records.
Australian core, with disclosed exceptions
Effica's primary database, authentication, file storage, and dynamic application compute are configured in Sydney. Core operational records are hosted in Australia. Selected email, AI, push, mapping, support, payment, enquiry, and background-processing services may process limited information overseas only for their stated functions and under appropriate contractual and security safeguards. Public and static content may be delivered globally.
Transactional email is delivered through Resend in the United States and may process recipient addresses, generic or service-message content, links or codes, and delivery metadata. Effica minimises email content and provides protected records through Effica-controlled secure access.
Privacy safeguards
AI with privacy safeguards and human oversight
Effica uses optional AI for selected workflows started by authorised users. We send only what the task needs, keep a recorded yes for named people, and keep people responsible for reviewing the result. We are working toward OpenAI Zero Data Retention.
- Purpose-limited. AI is used only for the selected workflow initiated by an authorised user.
- Data-minimised. Inputs are limited to information relevant to the request. We send only what the task needs.
- Named-person yes. Help that uses a named participant's record stays off until a recorded yes, and can be turned off.
- No training opt-in. Effica has not opted customer data into model training.
- Human oversight. Authorised people review outputs before relying on them or taking action.
Care context is treated as protected personal information. Staff review AI output before relying on it.
Changes, questions, or objections
We update this page when the material processing arrangement changes and provide additional notice where a customer agreement requires it. Before activating a new material sub-processor for customer information, Effica will assess the service and update this list. For questions, available data-processing documentation, or an objection to a proposed change, contact info@effica.com.au.
See the Privacy Policy for individual rights, complaints, and further overseas-processing information.