| Provider Name | Data Category | Purpose | Region | Last Verified |
|---|---|---|---|---|
| Clerk | Authentication credentials and session tokens | User authentication and session management | United States | 2026-03-15 |
| Cloudflare R2 | Object storage references and signed upload artifacts | Asset storage and retrieval | Global | 2026-02-22 |
| OpenProject | Work package metadata and project tracking references | Internal project tracking and delivery workflow management | Self-hosted | 2026-03-15 |
| Oracle Cloud Infrastructure | Application containers and deployment artifacts | Virtual private server hosting (IaaS — self-managed) | United States | 2026-04-06 |
| Resend | Transactional email delivery metadata | Transactional email delivery | United States | 2026-02-22 |
| Sentry | Operational telemetry and error diagnostics | Application monitoring and exception reporting | United States | 2026-02-22 |
| Stripe | Payment and billing records | Payment processing and invoicing | United States | 2026-02-22 |
| Trigger.dev | Background task execution metadata | Asynchronous background job processing | United States | 2026-03-15 |
| Upstash Redis | Rate limiting counters and session cache keys | Rate limiting and ephemeral cache | United States | 2026-03-15 |
Change Policy
- New sub-processors are vetted before onboarding.
- This disclosure is updated after processor changes.
- Material processing changes are communicated to active clients.