Sub-processors
Last updated 11 October 2026
Providers that process personal data for Recepsi. We give 14 days' notice before adding one.
| Provider | Purpose | Location | Role | DPA | Status |
|---|---|---|---|---|---|
| Cloudflare, Inc. | App hosting; bot/spam protection (Turnstile) | Global edge network: requests may be processed outside Singapore. Workers Logs kept for up to 7 days; no message bodies logged | Sub-processor | cloudflare.com/cloudflare-customer-dpa | In use |
| Supabase Pte. Ltd. | Database, logins, vector storage | Singapore (ap-southeast-1) | Sub-processor | supabase.com/legal/dpa | In use |
| Cloudflare, Inc. | Backups | Cloudflare R2 with an Asia-Pacific location hint (best effort), so backups may be stored outside Singapore | Sub-processor | cloudflare.com/cloudflare-customer-dpa | Planned |
| OpenAI OpCo, LLC | Language model (chat + embeddings) | US/global | Sub-processor | Covered by provider terms | In use |
| Anthropic, PBC | Language model fallback | — | — | Not yet in use | Not in use (14 days' notice before we start) |
| Resend (Plus Five Five, Inc.) | Transactional email | United States (hosted on Amazon Web Services) | Sub-processor (emails to business owners only; hand-over summaries may include a customer's chat snippet and contact details) | resend.com/legal/dpa | In use |
| Telegram Messenger Inc. | Telegram Bot API | Telegram cloud, multiple jurisdictions, not selectable | Independent controller of messages on its platform (no DPA, no region choice) | Independent controller: no DPA | In use |
| Meta Platforms Ireland Limited | WhatsApp Business Platform (phase 2) | Meta data centres internationally; Singapore local storage where available | Processor | Not yet in use | Planned (not in use yet) |
| Stripe Payments Singapore Pte. Ltd. | Payments | Global | Owner subscription payments only | stripe.com/legal/dpa | When billing launches |