Provider transparency

Subprocessors

This list names providers supported by current source evidence and separates them from infrastructure that still requires deployment review. It does not guess vendor regions or contractual terms.

Effective October 14, 2026Version 1.0

Confirmed source integrations

ProviderPurposeData categoryLocation / transfer note
OpenAIGenerate configured AI summaries, answers, CV analysis, mappings and suggestions.Relevant extracted text, prompts, evidence and generated results for an AI-assisted request.Provider region, account configuration, retention and transfer mechanism require contract and deployment review.
Vercel Web AnalyticsMeasure production website usage when the frontend is running in the configured Vercel environment.Analytics and technical usage events defined by the active provider configuration.Active configuration, region and consent treatment require deployment and legal review.

Conditional use

OpenAI is contacted only by configured AI workflows. Vercel Analytics is conditionally mounted by the frontend when the relevant production environment flag is present. Listing a provider does not mean every tool sends data to it.

Providers requiring deployment review

The repository supports or references hosting, CDN, storage, database and conversion infrastructure, but the public deployment vendor and region cannot be confirmed from source alone. The public domain currently responds through nginx, which identifies software rather than the responsible hosting provider.

Email and contact-processing providers are not listed because no approved public contact channel is configured.

International processing

Confirmed or deployment-dependent providers may process data outside the user’s country. No specific region, adequacy decision, standard contractual clause, data-processing agreement or other transfer mechanism is represented here without verified contracts and legal review.

Provider changes

This page should be updated before a new provider receives production personal data. The operating owner should retain the provider purpose, data categories, region, contract/DPA review, security review and effective date.