Subprocessor List
Effective: 2026-07-25 · Updated when vendors change.
| Vendor | Purpose | Data processed | Region |
|---|---|---|---|
| Google Cloud Platform | Database (Cloud SQL), authentication (Identity Platform), object storage (Cloud Storage) | All application data at rest | us-east5 (Columbus, OH) |
| Cloudflare | CDN, Pages hosting, RAG Worker (when enabled) | HTTP traffic, cached static assets, RAG payloads | Global edge |
| Microsoft 365 / Graph | Optional Word / OneDrive sync | Report DOCX files user chooses to publish | Customer tenant region |
| Hugging Face | ML model hosting (inference, when enabled) | Roof images sent for classification | Deployment-specific |