Subprocessor draft
Subprocessors
Draft provider and subprocessor page. Todd still must confirm which vendors are active, optional, planned, or deferred before this list can be published.
DRAFT — under review, not yet in effect
This page is draft public copy for Todd/legal review only. It is not legal advice, not an approved policy, not a provider submission, and not authorization to publish or deploy.
Draft classification rule
A provider should appear on the published list only when Todd confirms its production role, data categories, legal/security links, and whether it processes customer data for the shipped product.
- Conditional providers should not be represented as active unless the related feature is enabled for the public beta.
- Deferred providers should remain clearly marked as deferred until Todd reopens the product lane that uses them.
- Billing, email, bank-data, Google, AI, analytics, and support tooling must be reviewed separately before publication.
- Provider terms, DPAs, security pages, retention behavior, and subprocessors must be reviewed before public use.
Draft Provider Table
This is a working review table only. It is not an approved public subprocessor list.
| Provider | Draft status | Likely data boundary |
|---|---|---|
| Vercel | Draft active hosting boundary | Public site, app runtime, deployment, and request metadata. |
| Supabase / Postgres | Draft active database boundary | Application database records and authentication-adjacent storage when hosted. |
| Plaid | Conditional bank-data connector | Read-only bank transaction and account metadata if a user connects a bank workflow. |
| SimpleFIN | Conditional bank-data connector | Read-only bank transaction data if this alternate connector is enabled. |
| Resend | Planned or conditional email provider | Transactional or invite email only after product-domain sending is approved. |
| Google OAuth, Gmail, and Drive | Deferred connector family | User-authorized Gmail or Drive data only if Todd reopens that product lane. |
| Gemini, OpenAI, and Anthropic | Conditional AI providers | Feature-specific extraction, classification, draft writing, or review payloads when enabled. |
| Stripe | Future billing provider | Plan, checkout, invoice, tax, subscription, and payment metadata if billing is activated. |