Subprocessor List
Last updated: 2026-07-28. Public subprocessor disclosure lists legal entity, generic service purpose, country or legal seat, and contractual transfer basis. Routing detail is not published. Runtime-active panel processors: none. A European hostname is not residency.
| Subprocessor | Service | Entity country | Transfer safeguard |
|---|---|---|---|
| MongoDB, Inc. | Primary application database | United States | DPA |
| Railway Corporation | Backend application hosting | United States | SCC |
| Redis (Railway plugin and/or Upstash per docs) | Cache / rate-limit / session helpers | United States | SCC |
| Vercel Inc. | Landing + dashboard CDN / hosting | United States | SCC |
| Lemon Squeezy (Sold through Link, LLC) — Stripe affiliate | Merchant of Record / self-serve payments | United States | SCC |
| Resend Inc. | Transactional email | United States | SCC |