Sovereign Software, LLC uses different providers for the accounting connector, website hosting, website forms and business administration. Not every provider listed here processes accounting records on a customer's behalf.
Accounting connector
Railway — in use
Railway hosts the Sovereign Accounting Sync connector. Its published Data Processing Addendum identifies Railway Corporation.
What the hosted service handles: readable accounting information passing through an authorized workflow, and your accounting provider's responses while they are being processed. What it stores: encrypted connection credentials that Sovereign's service can decrypt, connection and access status, operational and identity records of postings, and account-setup information. Railway's edge logs separately retain client IP addresses and browser details in clear for about 30 days under Railway's policy.
Your approved journals, account mappings and account-plan details stay in the encrypted company file on your computer. The connector does not keep the contents of accounting-provider responses; it does keep identifiers that stay linkable to your business.
The hosted connector runs cleanup on a schedule: a finished operational record is reduced after the default 90-day period or during disconnect cleanup, the resulting identity record is deleted 13 months after the operation and keeps a protected fingerprint of the provider's company identifier rather than the readable identifier, and resolved account-setup plans are removed after 30 days. Older records may remain until the retention process has handled them, including readable company identifiers retained without a previous time-based limit. A deletion confirmation reports what was actually removed. See the Privacy Policy for the complete retention description.
We do not currently promise a particular hosting region or U.S.-only storage. Provider-retained copies may be subject to separate retention rules.
Railway publishes its DPA (opens in a new tab) and subprocessor list (opens in a new tab). Railway's own suppliers are not automatically direct suppliers contracted by Sovereign, and Railway-wide location statements do not establish this deployment's location.
Website and business services
Jotform — in use for website signup forms
Our signup form collects required email and consent, with optional name, business, role and interest, for product updates and testing interest. Jotform processes the submitted fields and the browser, request and cookie information its form configuration collects. Submissions may also appear in notification mailboxes or connected services. These are website records, separate from the encrypted company file and from anything the accounting connector handles.
Jotform's Privacy Policy (opens in a new tab) names Jotform Inc. as its default provider unless otherwise noted. Its transfer assessment (opens in a new tab) explains account and location differences, and it publishes a DPA (opens in a new tab). We have not confirmed the account-specific region or a complete retention schedule covering form, integration and email copies.
Stripe — selected for subscription billing
Stripe is the selected provider for Sovereign subscription checkout, recurring billing, invoices, payment status and the customer account portal. Subscription billing is not yet integrated. The applicable contracting entity, processing locations and final data fields depend on that setup.
This role is separate from payroll payment execution or a customer-owned accounting integration. We do not represent that the accounting connector receives full payment-card details.
Vercel — in use for website hosting
Vercel hosts our website. Website hosting involves processing website requests and associated technical information. This is separate from the accounting connector hosted on Railway.
Vercel publishes its Privacy Notice (opens in a new tab) and a security page (opens in a new tab).
Business email and website infrastructure
Business email handles support, privacy, legal and security correspondence and may receive form and subscription notifications. Website hosting, CDN and DNS services handle site delivery and related requests; the information they receive depends on whether they provide DNS only, proxy traffic, or load resources in the browser.
Website and business-correspondence processing is separate from the Railway accounting connector. This register does not promise that processing is limited to the United States.
Independent services and your chosen partners
- Intuit / QuickBooks Online is an independently selected accounting provider. It receives authorization and approved API writes and supplies accounting responses. It is not automatically Sovereign's subprocessor. The connector has a test and a production environment; production is currently used internally against Sovereign's own books. Customer connections to live accounting data await app approval.
- Accountants, bookkeepers and managed service providers receive access only with the client's authorization and applicable terms. AnyWay Tech is an MSP owned by Sovereign's owner and a remote replacement-partner option. It is not automatically assigned and receives no records or credentials merely by being listed. A client-selected advisor is not automatically Sovereign's subprocessor.
Accounting Sync does not currently include a Plaid banking integration. Separate advisory services and any future banking product require their own applicable disclosures.
Changes and questions
We retain dated versions of this register. We notify affected customers by email to the account contact before a new or replacement Hosted Service subprocessor begins processing, under the notice and objection procedure in the applicable DPA.
We review provider contract terms and applicable cross-border transfer safeguards before using a provider to process Customer Personal Data. A provider's certifications or public compliance claims do not certify Sovereign's application.
For additional detail about the information stored by a particular service, about a processing location or transfer arrangement, or for the DPA applicable to your service, contact privacy@ownmybooks.com.
Contact directory
- Privacy: privacy@ownmybooks.com; Privacy Office, Sovereign Software, LLC, PO Box 470, Wynne, AR 72396.
- Formal contractual notices: legal@ownmybooks.com; Sovereign Software, LLC, Attention: Legal Notices, PO Box 470, Wynne, AR 72396.
- Support: support@ownmybooks.com.
- Security and vulnerability reports: security@ownmybooks.com.
- Subscription cancellation: the customer account management portal when subscription billing is available.