| Provider | Purpose / data | Current status and location |
|---|---|---|
| Microsoft Azure | Application hosting, private PostgreSQL, backups, secret storage and operational logs | Active. Application resources in North Europe (Ireland). Vendor-wide support and processing terms also apply. |
| Resend / Plus Five Five, Inc. | Email transmission, receipt, delivery events and inbound attachment storage | Active for permitted testing, expected transactional messages and support replies for workspaces in good standing and verified domains. Cold outbound is prohibited. Domain configuration uses eu-west-1, but this does not establish EU-only processing. |
| PostHog | Product analytics: workspace usage events with the workspace ID, account email and workspace name; page views, counted without cookies when the visitor rejects analytics; and, with the visitor’s consent, interactions, performance, browser errors and masked session replays | Active when the operator configures a PostHog project. PostHog Cloud EU, with servers in Frankfurt. Browser requests pass through this website’s /ingest path. Entry reviewed October 9, 2026. |
Authoritative vendor terms: Microsoft DPA, Resend DPA, Resend subprocessors, PostHog DPA and PostHog subprocessors. Resend lists subprocessors in the United States. We must assess the relevant transfer safeguards and vendor contracts before activating customer personal-data processing. This list does not assert that a particular contract has been executed.
Other infrastructure
GoDaddy manages the current domain registration and DNS; it is not the application or mailbox host. GitHub holds source code and CI, not production mailbox data. Stripe provides hosted Checkout, recurring Billing, the customer portal and Stripe Tax. Billing information is shared with Stripe, which may act as a processor or independent controller depending on the service; its data processing terms and privacy notice describe its roles and international processing. When the internal support agent is enabled, emails sent to support@cyberpigeon.ai are processed by OpenAI Codex using the operator’s account to prepare and send replies. Replies copy office@cyberpigeon.ai, whose messages are forwarded to the operator at rangel@scargo.ai. This workflow does not connect other customer mailboxes to Codex. OpenAI processing is governed by the operator’s account terms and data settings. Customers may connect their own agents or LLMs and remain responsible for those integrations.
Changes
Before production processing, the executed DPA must specify advance notice and objection arrangements for subprocessor changes. Review date: September 11, 2026.