Subprocessors Registry
Last updated: 5 October 2026
Under our Data Processing Agreement (DPA) we rely on the following vetted subprocessors to operate the Platform. Each is bound by a written contract requiring confidentiality, security measures appropriate to the data processed, and cross-border transfer safeguards (Standard Contractual Clauses or equivalent).
| Vendor | Purpose | Data region |
|---|---|---|
| DigitalOcean LLC | Application hosting, database, object storage | USA / EU |
| Cloudflare, Inc. | CDN, DDoS protection, TLS termination | Global |
| Stripe, Inc. | Payment processing (international) | USA / EU |
| Postmark (ActiveCampaign LLC) | Transactional email delivery | USA |
| Google LLC | OAuth sign-in, reCAPTCHA | USA |
| OpenRouter / DeepSeek / OpenAI, LLC | Optional AI assistance; OpenAI also classifies uploaded text and images for content safety, separately from optional AI-chat consent | Global |
| Sumsub (Sum and Substance Ltd.) | Optional identity-document, selfie, liveness and face-match verification where offered; not available in native iOS | UK / EU and subprocessors identified in the Sumsub privacy notice |
We notify users of material changes to this list at least 30 days in advance by email or in-app banner so they can object. To object to a specific subprocessor, write to privacy@communitynet.app.