Sub-processors

Draft for review. A plain-language starting point, not legal advice. Have it reviewed by counsel and fill in your company/entity name, address, and governing-law jurisdiction before you go live.

We use a small number of vetted sub-processors to run the Service, each under a data-processing contract. We publish the list here (rather than 'on request') and notify of material changes so you can object.

Current sub-processors - Hosting / infrastructure — [provider], [region] (EU data residency available): compute, storage, database. - Payments — Stripe: subscription billing + tax; we never store full card numbers. - Email — Resend: transactional + notification email delivery. - Analytics — self-hosted Plausible (our own servers): cookieless, no personal data — see the [Cookie Policy](/cookies).

*(Operator: replace `[provider]`/`[region]` with the live vendors + locations before publishing.)*

Changes We post additions/replacements here and, where required, give notice so you may object. International transfers use appropriate safeguards (e.g. Standard Contractual Clauses).