Draft subprocessor register
No production subprocessor list is approved yet.
This placeholder does not appoint a vendor or authorize data transfer. Contracts, regions, purposes, data categories, retention, security terms, and transfer mechanisms require owner, security, privacy, and legal approval.
Current development state
The local build uses no approved production hosting, email, payment, telemetry, support, status, object-storage, or mobile-notification processor. Stripe behavior is sandbox-only and no live customer or payment data is sent.
Required register fields
A production entry must identify the legal entity, service and purpose, data categories, processing locations, transfer mechanism, retention/deletion terms, incident obligations, effective date, and customer notice process.
Change control
A vendor may not receive production data until due diligence, contract review, least-data configuration, deletion verification, incident routing, and the public notice process are complete.