Subprocessor register
Fewer processors, narrower jobs.
A provider receives only the data needed for its purpose. This development register is not a data-residency promise or a final production list.
Development draft — this page is local product evidence, not an approved public policy or legal commitment.
Planned production providers.
| Provider | Purpose | Document handling | Approval state |
|---|---|---|---|
| Supabase | Authentication and PostgreSQL account/job metadata | Document bytes and PDF passwords do not belong in the database | Architecture selected; production project and region pending |
| Cloudflare R2 | Private, short-lived processing objects | Opaque keys, explicit upload consent, short retention | Architecture selected; production bucket/region pending |
| Stripe | Hosted checkout, billing, invoices, and customer portal | No PDF content; payment details stay on hosted Stripe surfaces | Test integration exists; live tax/catalogue approval pending |
| Hosting, email/support, monitoring | Web delivery, transactional communication, support, incidents | Must use content-free schemas; no ordinary document attachment flow | Provider selection and contracts pending |
Current processing-location disclosure: Local development only; production regions are not approved.