Softcrum Sub-processors — DRAFT v0.1 (public list, trust center)

⚠️ INFORMATIVE TRANSLATION — NOT BINDING. The Spanish version at ../../legal/ is the authoritative text and the only one that may be signed, published or presented to a third party. This English rendering exists so that non-Spanish readers can review the content; where the two differ, Spanish governs. Like its original, it is an unreviewed working draft — nothing here is legal advice, and nothing is final until a Chilean data-protection lawyer has signed off.

Provider	Service	Processing location	Role	Transfer guarantee
Supabase	Database and storage	[contracted region]	Sub-processor	Provider DPA + clauses
Vercel	Compute, queues, cron	US / [region]	Sub-processor	DPA + clauses
Resend	Email delivery	US	Sub-processor	DPA + clauses
Upstash	Redis (rate limiting, cache, buckets)	[region]	Sub-processor	DPA + clauses
Google (FCM/Crashlytics)	Push and mobile stability	Global	Sub-processor	DPA + clauses
Pusher	Realtime channels	EU / US	Sub-processor	DPA + clauses
BetterStack	Observability (logs with tenant_id/correlation_id)	EU	Sub-processor	DPA + clauses
Paddle	International merchant of record	EU / US	Independent controller (payments)	—
Fintoc	Payment initiation, Chile	Chile	Independent controller	—

Changes: [30] days’ notice by email plus a trust center changelog entry.

⌘I