Subprocessors

Supabase provides managed Postgres, authentication, and private evidence object storage. Hetzner provides the application and worker host for the cost-first production topology. Cloudflare provides DNS, edge protection, and Turnstile abuse prevention.

A contractually selected independent S3-compatible provider stores client-encrypted disaster-recovery snapshots. Cloudflare R2 is the default cost-first option; an isolated deployment may name another provider in its order form.

Bright Data runs the enabled answer-provider collection datasets and receives prompts, locale, region, and fresh-session sampling instructions.

OpenAI performs schema-constrained enrichment of collected answer text, confirmed brand names, and confirmed competitor names. Prefometry sets API storage to false, validates every evidence substring locally, and keeps deterministic provider evidence authoritative if enrichment fails.

Creem is the default Merchant of Record and processes checkout, subscriptions, invoices, taxes, refunds, and payment status. Stripe may be used only in an explicitly configured alternative deployment. Resend delivers workflow and essential account email. Google processes OAuth and read-only Search Console or Analytics requests only when a workspace explicitly connects those services.

A configured OpenTelemetry or error-monitoring endpoint receives operational diagnostics designed to exclude provider response bodies, OAuth tokens, and customer secrets.

This list describes the default hosted topology and may differ for a contractually isolated deployment. Customers entitled to advance notice receive it through the contact in their order form or deployment agreement.