Service providers

Website hosting, delivery, security, analytics and support/privacy email routing. Relevant information can include connection metadata, usage/performance measurements and routed messages. Cloudflare privacy policy.

Account authentication and private cloud workspace storage. Relevant data includes account email, session information and workspace content you explicitly save. Supabase privacy policy.

Delivery of sign-in emails. Relevant data includes recipient email, message content and delivery records. Resend privacy policy.

Support and privacy correspondence is forwarded to an operator-monitored Gmail inbox. Messages and attachments you send are processed there. Google privacy policy.

This is a functional provider inventory, not a completed contractual subprocessor schedule. Contracting legal entities, processing locations, retention details and transfer mechanisms must be checked for your requirements before executing a DPA. No regional data-residency guarantee is made. Current customer workspaces have no connected generative AI provider.

For provider questions or a proposed DPA, contact [email protected]. See the DPA draft and Privacy notice.