# Subprocessors

v1 region: **United States**. No AI vendor that keeps media or extracts biometrics.

| Vendor | Role | Data |
|---|---|---|
| Cloudflare (Pages, Workers, Stream, Queues) | Edge, API, hosted video | Intro media, request logs |
| Neon | Postgres | Account, intro metadata, audit, credits |
| Stripe | $10 credit lots (test now; live blocked on counsel) | Client email via Checkout. No card PAN in our DB |
| Resend | Transactional email: magic link, member notify/remind | Client email, subject and body. Never a candidate address, never media |

Not on this list: face/voice AI, session replay, analytics pixels on the recorder, UseVerb.

Update this file when a vendor is added. A first house DPA names these.