Trust
Sub-processors
15 vendors that may process Cavaridge customer data. Exhaustive list, kept honest.
Last reconciled against the codebase: 2026-05-05. Material changes are notified to BAA-covered tenants at least 30 days in advance per the BAA template.
| Vendor | Purpose | Data class | PII / PHI | Region | Basis | Evidence | Review |
|---|---|---|---|---|---|---|---|
Railway Corp. Railway | Application hosting, container orchestration, managed Redis, build runners | Content | PIIPHI | us-west2 (Oregon) | DPA + BAA | link | verified |
Supabase Inc. Supabase Postgres + Auth helpers + pgvector | Primary application database (cavaridge-platform-prod), row-level security enforcement, vector storage | Content | PIIPHI | us-west-2 (Oregon) | DPA + BAA | link | verified |
Clerk, Inc. Clerk authentication + session management | User identity, session tokens, organization membership | Identity | PII | United States | DPA | link | verified |
Stripe, Inc. Stripe + Stripe Connect Express | Payment processing, billing, partner payouts (PROD-08) | Billing | PII | United States | DPA | link | verified |
Cloudflare, Inc. Cloudflare DNS + CDN + DDoS | DNS resolution, edge caching, TLS termination, DDoS mitigation | Telemetry | PII | Global edge | DPA | link | verified |
Doppler, Inc. Doppler secrets management | Secrets distribution to Railway services and GitHub Actions | Secrets | — | United States | DPA | link | verified |
OpenRouter, Inc. OpenRouter LLM gateway | Routing layer between Spaniel and underlying model providers | Content | PIIPHI | United States | DPA + BAA | link | verified |
Anthropic, PBC Claude API (via OpenRouter; direct via @anthropic-ai/sdk in select packages) | LLM inference (default model family for most agent workflows) | Content | PIIPHI | United States | BAA | link | verified |
OpenAI, L.L.C. OpenAI API (via OpenRouter; direct via openai SDK in select packages) | LLM inference (alternative model family) | Content | PIIPHI | United States | BAA | link | verified |
Google LLC Gemini API (via OpenRouter) | LLM inference (alternative model family) | Content | PIIPHI | United States | BAA | link | verified |
Functional Software, Inc. (Sentry) Sentry error monitoring | Application error capture, stack trace aggregation | Telemetry | PII | United States | DPA | link | verified |
Finto Technologies GmbH (Langfuse) Langfuse LLM observability | Prompt + response tracing, evaluation, latency tracking | Content | PIIPHI | EU (with US deployment option) | DPA + BAA | link | verified |
Resend.com, Inc. Resend transactional email | Transactional email delivery (Cavaridge Herald) | Identity | PII | United States | DPA | link | verified |
GitHub, Inc. GitHub source control + Actions | Source control, CI/CD | — | — | United States | DPA | link | verified |
Pax8, Inc. Pax8 Marketplace (PROD-08) | Reseller marketplace listing distribution | Billing | PII | United States | DPA | link | verified |
Evaluated, not engaged
- HackerOne / Bugcrowd: VDP runs in-house at PROD-09 launch. May add a managed bug bounty later (operator decision).
- PagerDuty / Opsgenie: On-call paging is operator-side at PROD-09 launch (single-operator rotation).
- Segment / PostHog / Mixpanel / Amplitude: Cavaridge does not run third-party analytics. Pulse is the in-house telemetry layer.
See also: /security · /legal/privacy · BAA request.