Subprocessors & Data Retention

以英文协议文本为准。界面翻译不能替代协议。

Infrastructure: Cloudflare Workers, D1, R2 and Queues. Transactional email: Resend only when configured. Turnstile: Cloudflare when configured. No LLM provider is active. Processing artifacts contain normalized facts, not raw HTML, and expire within 24 hours. OTP records expire after 24 hours, inactive sessions within 24 hours, session history after 30 days, API usage and audit metadata after 90 days. Authorization receipts are retained up to 365 days after withdrawal unless counsel approves a different documented legal hold. Production requires review of contracts, international transfers and retention periods.