Subprocessors and service dependencies

Stores application and tenant data. The operator, region, encryption and backup terms depend on the selected managed database.

Stores private customer uploads. The operator and region are deployment-specific; the bucket must remain private and encrypted.

Processes bounded content for enabled AI features. It is disabled by default in staging and production until explicitly enabled.

Receives destination email addresses and transactional message content for verification, recovery and notifications.

Processes imported documents inside the configured private service boundary. The deployment must prevent public ingress.

Google Drive, Confluence, Notion, SharePoint and OneDrive integrations process only after customer authorization. Credentials are encrypted at rest by the application.