Provider and subprocessor register
Draft aligned with the selected policies; outstanding facts and review remain pending.
Version: 2026-10-19-selected-policies-v2Hosting and database
The application uses Node.js/Next.js and MongoDB. The production host, contracting entity, database location, backup region and access arrangements are pending confirmation.
AI
OpenRouter/Gemma or the configured AI adapter may receive minimized case context. The actual selected model provider, contractual terms, retention, training settings and processing locations need confirmation; this register does not approve an unverified provider.
Official Google Business Profile authorization supports connected review workflows. Connection tokens and authorized content are handled within the supported workflow. The active configuration and applicable provider policy requirements require verification.
Email, SMS and WhatsApp
SendPulse is the intended email path; Google Firebase Authentication is used for registration SMS when configured. Phone numbers are sent to and stored by Google for verification and spam and abuse prevention across Google services. WhatsApp delivery uses the configured provider or supported fallback. Actual entities, locations, permissions, retention and live readiness remain pending. No live delivery is established by this document.
Payments and monitoring
Lemon Squeezy and Dodo Payments remain the planned payment providers under the existing routing contract; Sentry is used for error monitoring. Actual accounts, agreements, data recipients, regions and tax/retention arrangements require confirmation. Payment providers may independently determine some processing purposes.
Contact details are currently unavailable.