> ## Documentation Index
> Fetch the complete documentation index at: https://internal.softcrum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Softcrum Sub-processors — DRAFT v0.1 (public list, trust center)

> The sub-processors Softcrum relies on, what each one processes and where it runs. Changes are announced [30] days ahead by email plus a trust-center changelog.

> ⚠️ **INFORMATIVE TRANSLATION — NOT BINDING.** The Spanish version at
> [`../../legal/`](/legal/overview) is the authoritative text and the only one that may be signed,
> published or presented to a third party. This English rendering exists so that non-Spanish readers
> can review the content; where the two differ, Spanish governs. Like its original, it is an
> unreviewed working draft — nothing here is legal advice, and nothing is final until a Chilean
> data-protection lawyer has signed off.

| Provider                 | Service                                              | Processing location  | Role                              | Transfer guarantee     |
| ------------------------ | ---------------------------------------------------- | -------------------- | --------------------------------- | ---------------------- |
| Supabase                 | Database and storage                                 | \[contracted region] | Sub-processor                     | Provider DPA + clauses |
| Vercel                   | Compute, queues, cron                                | US / \[region]       | Sub-processor                     | DPA + clauses          |
| Resend                   | Email delivery                                       | US                   | Sub-processor                     | DPA + clauses          |
| Upstash                  | Redis (rate limiting, cache, buckets)                | \[region]            | Sub-processor                     | DPA + clauses          |
| Google (FCM/Crashlytics) | Push and mobile stability                            | Global               | Sub-processor                     | DPA + clauses          |
| Pusher                   | Realtime channels                                    | EU / US              | Sub-processor                     | DPA + clauses          |
| BetterStack              | Observability (logs with tenant\_id/correlation\_id) | EU                   | Sub-processor                     | DPA + clauses          |
| Paddle                   | International merchant of record                     | EU / US              | Independent controller (payments) | —                      |
| Fintoc                   | Payment initiation, Chile                            | Chile                | Independent controller            | —                      |

Changes: \[30] days' notice by email plus a trust center changelog entry.