Subprocessors
Subprocessors and provider readiness.
This baseline lists intended provider categories and keeps unverified production providers clearly marked as readiness-gated.
QR
One private event roll
QR access, guest uploads, sealed reveal, and one shared gallery.
- Cloudflare for DNS/CDN, R2 storage, Stream video when enabled, and security controls once configured.
- Stripe for paid checkout and payment metadata once sandbox and production readiness are verified.
- Cloudflare Email Service for transactional email once sending-domain and deliverability are verified.
- Postgres, PgBouncer, worker, monitoring, and backup services on the selected deployment stack.
- Umami, GlitchTip, and uptime monitoring when privacy and operations readiness are approved.
Local development uses fake or local-provider modes where appropriate. Production credentials, provider contracts, legal review, monitoring, backups, and restore evidence remain launch-readiness gates.