| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Hostinger International Ltd. | Application hosting — the servers the product and its database run on | All service data | United States (data center); provider incorporated in Cyprus |
| DigitalOcean LLC | Off-site backup storage — encrypted nightly database and evidence backups | All service data (backup copies) | United States |
| Stripe, Inc. | Subscription billing and payment processing — card details go to Stripe directly and never touch our servers | Billing contact, plan, payment records | United States |
| Resend, Inc. | Transactional email delivery — invitations, resets, reminders, billing notices | Recipient name and email, message content | United States |
There are no analytics providers, no advertising networks, and no AI training pipelines on this list, because none touch your data.
We add a subprocessor only after reviewing its security posture and putting data-processing terms in place. Customers on a data-processing agreement are notified of additions with time to object; this page is the canonical current list. A signed DPA is available to any customer — request one through the privacy request form.