Draft for legal review
Sub-processors
This register names the providers in the current stack — each one’s purpose, target region, and any disclosed transfer.
Vercel
Purpose: hosts and delivers the public web application and preview deployments.
Supabase
Purpose: managed PostgreSQL storing waitlist and consent records in a private schema this site’s public API never exposes. Target region: EU. See the privacy notice for what is collected when you join.
Resend
Purpose: sends waitlist confirmation, update, and unsubscribe email. Sending region: eu-west-1 (Ireland). Disclosed transfer: Resend’s own account data, logs, and analytics are processed in the United States, not the EU. An EU-based email fallback (AWS SES, eu-west-1) is available as an alternative.
Upstash (Redis)
Purpose: transient, keyed rate-limit counters that protect the waitlist form and the MCP schema-fetch tool from abuse. Each is a short-lived counter derived from the request IP; no signup record or email address is sent. Target region: EU.
Change notice
The production register will include effective dates and a process for notifying customers before adding a material sub-processor.