{
  "schema": "https://vumy.net/schema/subprocessors/v1",
  "generated_at": "2026-05-06T08:28:08.336Z",
  "subprocessors": [
    {
      "name": "Cloudflare, Inc.",
      "purpose": "Edge gateway, container compute, R2 object storage, Durable Objects (real-time), AI Gateway, CDN.",
      "region": "Global edge with US data plane",
      "category": "Hosting / Infrastructure",
      "effectiveDate": "2026-02-01"
    },
    {
      "name": "Neon (Databricks)",
      "purpose": "Managed Postgres for vumyo workspace data. Row-Level Security tenant isolation enforced at the application layer.",
      "region": "AWS us-east-1",
      "category": "Database",
      "effectiveDate": "2026-02-01"
    },
    {
      "name": "Anthropic PBC",
      "purpose": "AI inference for the Sutra workspace assistant. Workspace data is not used for model training.",
      "region": "United States",
      "category": "AI",
      "effectiveDate": "2026-02-15"
    },
    {
      "name": "Didit",
      "purpose": "Document OCR and identity verification within Secure module. Optional integration; only invoked on workspaces that opt in.",
      "region": "United States",
      "category": "Identity verification",
      "effectiveDate": "2026-03-01"
    },
    {
      "name": "BioID",
      "purpose": "Liveness detection within Secure module. Only invoked on verifications that require liveness.",
      "region": "European Union",
      "category": "Identity verification",
      "effectiveDate": "2026-03-01"
    },
    {
      "name": "Resend",
      "purpose": "Transactional email delivery (verification, important application events, system notifications).",
      "region": "United States",
      "category": "Email",
      "effectiveDate": "2026-02-01"
    },
    {
      "name": "Stripe",
      "purpose": "Subscription billing for vumyo paid tiers. Card data is processed by Stripe; vumyo never receives full PAN.",
      "region": "Global",
      "category": "Payments",
      "effectiveDate": "2026-02-01"
    },
    {
      "name": "Google",
      "purpose": "OAuth-scoped calendar synchronization for the Slot module. Only invoked when a user connects their Google calendar.",
      "region": "Global",
      "category": "Calendar (optional integration)",
      "effectiveDate": "2026-02-01"
    },
    {
      "name": "Microsoft",
      "purpose": "OAuth-scoped Outlook calendar synchronization for the Slot module. Only invoked when a user connects their Outlook calendar.",
      "region": "Global",
      "category": "Calendar (optional integration)",
      "effectiveDate": "2026-02-01"
    }
  ]
}