{
  "$schema": "https://intramedial.com/schemas/sub-processors/v1.json",
  "x-intramedial-policy": "docs/audit/19-sub-processor-inventory.md",
  "x-intramedial-status": "published",
  "x-intramedial-note": "Intramedial's sub-processor inventory, operated by Avonao, Inc. It mirrors /legal/subprocessors, which is authoritative. Account owners are notified at least 30 days before any addition; objections are accepted via privacy@intramedial.com. Customer-directed destinations (audit streams, connectors) are the customer's recipients, not sub-processors. Hashes and Merkle roots may also be anchored on public networks (OpenTimestamps); they carry no customer content.",
  "subProcessors": [
    {
      "name": "Cloudflare, Inc.",
      "purpose": "Hosting and compute (Workers), databases (D1), per-workspace storage (Durable Objects), object storage (R2), key-value storage (KV), queues, CDN, DNS, DDoS protection, assistant retrieval (Workers AI and Vectorize), transactional email (Cloudflare Email) and bot protection (Turnstile).",
      "dataCategories": [
        "Account data and credentials",
        "Agent and fleet records, coordination records, audit chain and ledger bundles",
        "Support attachments",
        "Email address and message content",
        "Operational logs"
      ],
      "processingRegions": [
        "US West",
        "Europe (Cloudflare EU jurisdiction)",
        "Asia-Pacific (location hint)",
        "Oceania (location hint)",
        "Global edge for request termination; KV, Queues and the retrieval index are not pinned to a region"
      ],
      "legalBasis": "Standard Contractual Clauses in the provider's data processing agreement and UK Addendum",
      "url": "https://www.cloudflare.com/cloudflare-customer-dpa/",
      "attestations": []
    },
    {
      "name": "Amazon Web Services EMEA SARL / Amazon Web Services, Inc.",
      "purpose": "Cold archive storage (S3 Deep Archive), key management for stored secrets (KMS), per-workspace Aurora Serverless database for dedicated-location workspaces, and, where the witness is enabled, a write-once copy of each Merkle root with a KMS countersignature.",
      "dataCategories": [
        "Archived workspace data",
        "Stored third-party secrets (sealed)",
        "Dedicated-location workspace data",
        "Merkle roots and hashes only, for the witness"
      ],
      "processingRegions": [
        "The AWS region the customer chooses for a dedicated location",
        "Archive regions: US West (Oregon), US East (N. Virginia), Europe (Ireland), Europe (Frankfurt), Asia Pacific (Singapore, Tokyo, Sydney, Melbourne)",
        "Witness: US East (N. Virginia)"
      ],
      "legalBasis": "Standard Contractual Clauses and UK Addendum in the AWS Data Processing Addendum",
      "url": "https://aws.amazon.com/compliance/gdpr-center/",
      "attestations": []
    },
    {
      "name": "Avonao Billing (Avonao Wallet) and Stripe, Inc.",
      "purpose": "Payments, subscriptions, invoices and tax through Avonao Billing, where Stripe is the merchant of record.",
      "dataCategories": [
        "Billing contact and address",
        "Tax details",
        "Card data (entered at Stripe only)",
        "Account email, plan and subscription data"
      ],
      "processingRegions": [
        "United States, and other locations where Stripe operates (billing is not regional)"
      ],
      "legalBasis": "Standard Contractual Clauses in the provider's data processing agreement",
      "url": "https://stripe.com/legal/dpa",
      "attestations": []
    },
    {
      "name": "Anthropic, PBC",
      "purpose": "Language model behind Number One, the assistant on the website and in the dashboard.",
      "dataCategories": [
        "Questions typed into the chat (last six turns) with a pseudonymous identifier, no email address or IP address",
        "For US-region workspaces, workspace records the assistant looks up"
      ],
      "processingRegions": [
        "United States (inference pinned to US infrastructure for US workspaces)"
      ],
      "legalBasis": "Standard Contractual Clauses in the provider's data processing agreement",
      "url": "https://www.anthropic.com/legal/commercial-terms",
      "attestations": []
    },
    {
      "name": "Resend, Inc.",
      "purpose": "Transactional email, used only as a fallback when Cloudflare Email cannot deliver.",
      "dataCategories": [
        "Email address",
        "Message content"
      ],
      "processingRegions": [
        "United States"
      ],
      "legalBasis": "Standard Contractual Clauses in the provider's data processing agreement",
      "url": "https://resend.com/legal/dpa",
      "attestations": []
    },
    {
      "name": "Google LLC",
      "purpose": "Website analytics (Google Analytics 4), only after the visitor allows Statistics; staff mailboxes (Google Workspace).",
      "dataCategories": [
        "Pseudonymous browsing data: cookie identifiers, pages visited, approximate location, browser and device type",
        "Mail sent to Intramedial mailboxes"
      ],
      "processingRegions": [
        "United States"
      ],
      "legalBasis": "Standard Contractual Clauses; consent required before analytics loads",
      "url": "https://cloud.google.com/terms/data-processing-addendum",
      "attestations": []
    },
    {
      "name": "Adobe Inc. (Adobe Fonts)",
      "purpose": "Typeface of the website's titles, loaded for visitors in the EU, EEA, Switzerland and UK only after they allow Fonts.",
      "dataCategories": [
        "IP address",
        "Address of the page",
        "Browser type"
      ],
      "processingRegions": [
        "United States / global CDN"
      ],
      "legalBasis": "Standard Contractual Clauses in Adobe's data processing terms; consent required before it loads",
      "url": "https://www.adobe.com/privacy/eudatatransfers.html",
      "attestations": []
    },
    {
      "name": "Avonao ID (id.avonao.com), operated by Avonao, Inc.",
      "purpose": "Sole identity provider for sign-up and sign-in. Same legal entity as the operator of the service; listed for transparency.",
      "dataCategories": [
        "Avonao ID identifier, confirmed email address, name and language",
        "Subscription state (none, free or paid), renewal date"
      ],
      "processingRegions": [
        "Data region of the member's Avonao ID account; home region US West"
      ],
      "legalBasis": "Same legal entity as the service; every exchange between the two is signed and authenticated",
      "url": "https://id.avonao.com",
      "attestations": []
    }
  ],
  "fraudDetectionProviders": "See /.well-known/fraud-providers.json: no third-party fraud provider processes Intramedial data."
}