# Subprocessors

v1 region: **United States** — media sits in R2 on an Eastern North America location hint rather than a residency lock; see `data-map.md`. No AI vendor that keeps media or extracts biometrics.

| Vendor | Role | Data |
|---|---|---|
| Cloudflare (Pages, Workers, Queues, R2, Containers) | Edge, API, private media store, transcode | Intro media, request logs. The container converts a take to a standard MP4 and keeps nothing |
| Neon | Postgres | Account, intro metadata, audit, credits |
| Stripe | $10 credit lots (test now; live blocked on counsel) | Client email via Checkout. No card PAN in our DB |
| Resend | Transactional email: magic link, member notify/remind | Client email, subject and body. Never a candidate address, never media |
| BigDataCloud | Reverse-geocode for `GET /v1/place` | Coarse lat/lng (~1 km) of candidates who allowed location. City name returned to the recorder. Not media. Not a typed address. |

Not on this list: face/voice AI, session replay, analytics pixels on the recorder, UseVerb.

Update this file when a vendor is added. A first house DPA names these.