Sub-processor register
Every third party that processes customer data, what it sees, and why.
This list is derived from the application's source code rather than from recollection, and is maintained as part of the release process.
| Sub-processor | Purpose | Data it can see |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions | All customer data |
| Vercel | Application hosting | Request metadata, IP addresses |
| Stripe | Payments and invoicing | Billing contact and payment details |
| Resend | Transactional email | Recipient addresses, message contents |
| OpenAI | AI assistant and document search | Prompt contents and indexed document text |
| Google (Gemini) | AI assistant, alternative provider | Prompt contents |
| Esri / ArcGIS | Map basemaps | Map viewport requests |
| Open-Meteo | Weather forecasts | Site coordinates |
| Mapterhorn | Terrain elevation tiles | Map viewport requests |
| DJI | Flight-log decryption keys | Flight-log identifiers |
| NOAA (aviationweather.gov) | Aviation weather | Public government service |
AI providers and your content
Two AI providers are integrated. Which is active depends on configuration. AI features are optional and can be disabled for your account, in which case no content is sent to either.
[CONFIRM] Whether customer content is excluded from model training must be verified against each provider's current terms and stated here explicitly.
Data residency
The database, authentication records and file storage are hosted by Supabase in eu-central-1 (Frankfurt, Germany). Everything the product stores at rest is there.
Processing is a wider question than storage, and the table above is the reason why. Of the services listed:
- Vercel serves the application from the edge location nearest the visitor, so request metadata and IP addresses are handled there rather than in Frankfurt.
- Server functions run, by default, in the region closest to the caller rather than next to the database.
- OpenAI and Google (Gemini) process prompt contents in the United States. AI features are optional and can be turned off for your account.
- Stripe, Resend, Esri, Open-Meteo, Mapterhorn, DJI and NOAA each operate their own infrastructure outside any single region.
So the accurate summary is: storage is in the EU; processing is not exclusively in the EU. We state it that way because a residency claim covering only storage is the kind of thing a security reviewer finds on their own, and finding it is worse than being told.
Changes
We will give notice before adding a sub-processor that materially changes how customer data is handled.