Current website and communication providers
| Provider | Purpose | Data | Status |
|---|---|---|---|
| Cloudflare, Inc. | Domain, DNS, website delivery, security, and email routing | Website request metadata and routed email envelope data | Current |
| Google LLC | Destination mailbox for RecordLint contact addresses | Business contact and support email supplied by the sender | Current |
| OpenAI, L.L.C. | Private preview hosting and owner authentication | Preview request and account-authentication metadata | Current preview only |
Planned production providers
RecordLint has not yet connected a public production customer environment. The following providers and EU regions are planned, but production contracts and configuration are not yet final. This page will be updated if the deployed providers differ.
| Provider | Purpose | Data | Location | Status |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Application and worker hosting, secrets, logs, and managed Redis | Encrypted application data and minimized operational metadata | Germany — Frankfurt (eu-central-1) | Planned; not configured |
| Neon, Inc. | Managed PostgreSQL | Encrypted credentials and operator data, temporary encrypted scan workspace, minimized findings and audit data | Germany — Frankfurt (aws-eu-central-1) | Planned; not configured |
Customer-directed platform
Zendesk is the platform selected by the Customer and the source of customer-controlled data. Its role is governed by the Customer's agreement with Zendesk rather than by RecordLint's subprocessor appointment.
Changes
Where required by the DPA, customers will receive at least 30 days' notice of a material new production subprocessor and a reasonable opportunity to object on data-protection grounds. Questions: privacy@recordlint.com.