Legal
Subprocessors and data locations
Draft — 2026-11-08 (planned providers; none are processing real customer data yet)
Planned providers
| Provider | Purpose | Data | Location (planned) |
|---|---|---|---|
| Supabase | Database and private file storage | Account data, documents, audit records | Canada (ca-central-1) — to confirm |
| Resend | Transactional email | Recipient email, subject, message body with private links | United States |
| Stripe | Subscription billing | Sender name, email, payment details | Stripe data centres (US/global) |
| Hosting provider | Web application | Requests in transit, short-lived logs | To be selected |
Notes
We'll update this page before any provider processes real customer data. [OWNER: confirm vendors, DPAs, regions, and backup/log locations]