Subprocessors & Data Retention
Legal review pending. These English templates are drafts; production authorization is disabled until approved.
The governing agreement text is in English. Translations of the interface do not replace it.
Document version: 2026-10-08-draft.1 · SHA-256:ff41c61a87e63248a21a343e357230e784bb01b7392f49545ac5b1b6a6085eceInfrastructure: Cloudflare Workers, D1, R2 and Queues. Transactional email: Resend only when configured. Turnstile: Cloudflare when configured. No LLM provider is active. Processing artifacts contain normalized facts, not raw HTML, and expire within 24 hours. OTP records expire after 24 hours, inactive sessions within 24 hours, session history after 30 days, API usage and audit metadata after 90 days. Authorization receipts are retained up to 365 days after withdrawal unless counsel approves a different documented legal hold. Production requires review of contracts, international transfers and retention periods.
Home