Legal and privacy
Sub-processors (draft)
Candidate list for review · August 2026
This table describes candidate providers and categories that may be used for an approved tenant. It is not a production-use declaration, a residency commitment, or contractual notice. The signed DPA and tenant-specific sub-processor schedule identify the providers actually authorised, their purpose, locations, safeguards, and applicable change-notice process.
| Sub-processor | Purpose | Region |
|---|---|---|
| Supabase (candidate) | Managed Postgres and authentication, where included in the approved tenant scope | Contract-dependent |
| Cloudflare Workers (candidate) | Edge delivery and compute, where included in the approved tenant scope | Contract-dependent |
| Configured AI model providers (candidate) | Policy-controlled model inference only when enabled and approved for the tenant | Provider- and contract-dependent |
| Zoho ZeptoMail (candidate) | Transactional email where enabled for the approved tenant workflow | Provider- and contract-dependent |
Request the current tenant-specific list and DPA at legal@falconcortex.com.