Subprocessors · Prometheor

Configured provider register

Provider	Purpose	Data boundary	Region or status
Vercel, Inc.	Web, BFF, MCP, WAF, runtime logs and signed Log Drain	Requests, encrypted payload in transit and minimized logs	fra1. Prometheor's application functions run in Vercel's Frankfurt region (fra1). Vercel, Inc. is a United States company; request routing, edge protection and runtime logs may involve processing in the United States under Vercel's Data Processing Addendum with the EU standard contractual clauses as the transfer safeguard. Runtime logs contain no Memory content. Log Drain: inactive.
Supabase, Inc.	Authentication and PostgreSQL	Identity/session metadata, encrypted canonical Memory and receipts	Database project in Frankfurt; provider subprocessors operate under the reviewed DPA
Google Cloud	KMS and encrypted recovery storage	Ciphertext, wrapped keys and object metadata	Frankfurt recovery resources under the reviewed Cloud Data Processing Addendum
Google identity services	Owner and user sign-in	Identity and OAuth metadata	OAuth terms and user-data policies reviewed for the selected launch markets
Resend	Content-free alert and recovery email	Destination address, delivery metadata and content-free notice	Resend, Inc. sends Prometheor's content-free operational alert and account-notification emails from its Ireland (eu-west-1) sending region; Resend stores account metadata, delivery logs and API records in the United States under Resend's Data Processing Addendum with the EU standard contractual clauses. These emails never contain Memory content.
OpenAI	Future automatic extraction	Bounded admitted extraction text only	Inactive; no credential or live automatic-capture path configured

Provider records

Prometheor updates this register before a newly configured provider receives pilot data.