Legal
Sub processors
Every third party that touches your data, what it does, and where it sits.
Who touches your data.
Each one is here because it does a job Arci cannot do alone. Nothing else gets a copy.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, storage | United States |
| Vercel | Application hosting and compute | United States |
| Cloudflare R2 | Object storage (assets, documents) | Global CDN |
| Upstash | Redis (rate limiting, caching) | United States |
| Inngest | Background job orchestration | United States |
| Resend | Transactional email | United States |
| OpenAI | Model inference (optional, bring your own key) | United States |
| Anthropic | Model inference (optional, bring your own key) | United States |
| Google Cloud | Model inference (Gemini, optional, bring your own key) | Global |
| Stripe | Payment processing | United States |
To object to a new sub-processor, or to be notified of changes, email legal@flares.in.