Subprocessors and Infrastructure Statement
Sign and Go
Owned by NT Development Group
ABN 41 660 399 020
Address: Level 1, 18-20 Knuckey Street Darwin NT 0800
Contact: sign@signandgo.com.au
Effective date: 20 May 2026
1. Purpose
This statement describes third party service providers that may process customer data to operate Sign and Go, and provides a high level overview of our infrastructure.
2. Subprocessors
A subprocessor is a third party that processes customer data on our behalf to help deliver the Service. Customers may request the current list at sign@signandgo.com.au.
As at the effective date, Sign and Go may use the following subprocessors.
Application hosting and runtime infrastructure
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Platform (Cloud Run) | Application hosting, backend compute, and static site hosting (Firebase Hosting) | Service metadata, operational logs, and data necessary to run the application | australia-southeast1 (Sydney) |
Database and document storage
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Firestore | Primary database and document storage, including file storage via Firebase Storage | Documents, envelopes, audit events, contacts, templates, company records, workspace data, and related metadata | australia-southeast1 (Sydney) |
Email delivery
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| SendGrid (Twilio Inc.) | Delivery of signing invitations, reminders, and service emails | Recipient names, email addresses, and email delivery metadata | United States |
SMS notifications
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Twilio | SMS signing notifications and verification codes | Recipient phone numbers and notification content | United States |
Payment processing
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Subscription billing and payment processing | Billing name, email, payment card details (PCI DSS Level 1 compliant) | United States and European Union |
Product analytics
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| PostHog | Pseudonymised product usage analytics, routed via a Sign and Go-hosted proxy in Sydney for additional privacy | Pseudonymous user identifiers and page-view events. No document content, no signature data. | European Union (Frankfurt) |
AI services
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Vertex AI (Gemini) | AI assistant ("Sharna"), AI document summary, AI field-placement detection on uploaded documents | User prompts and document text excerpts; Google does not use this data to train its models per the Vertex AI customer data terms | australia-southeast1 (Sydney) |
Optional integrations enabled by customers
| Provider | Purpose | Data Processed |
|---|---|---|
| Monday.com | Optional synchronisation of workflow or status, where configured by the customer | Envelope status metadata and identifiers, as configured |
| Google Gemini AI | Optional AI-powered support chat assistant | Chat messages submitted by the user; no document content is sent |
Authentication providers
| Provider | Purpose | Data Processed |
|---|---|---|
| Google OAuth | Optional sign in method, where enabled | User identity attributes provided by Google, typically name and email |
| Microsoft OAuth | Optional sign in method for Microsoft 365 users | User identity attributes provided by Microsoft, typically name and email |
3. Infrastructure overview
- The Service operates as a web application and API, hosted on Google Cloud Platform in the australia-southeast1 (Sydney) region.
- Documents are stored within Google Cloud Firestore and Firebase Storage, both configured for the Sydney region.
- All customer data at rest is located within Australian data centers.
- Audit trails record key workflow events and may be verified using tamper evident audit chain verification.
4. Changes
We may update subprocessors from time to time. For paid customers, we will provide notice of material changes where practical.