| Provider | Purpose | Data boundary | Location |
|---|---|---|---|
| Cloudflare | Relay compute, encrypted storage, delivery state, security, DNS, and public website | Encrypted payloads, public key material, opaque routing and usage state, and request metadata | Global network; United States entity |
| Vercel | Console and documentation hosting | Console requests, authentication session data, and project administration | United States |
| Neon | Console database for organization, project, licensing, and terms-acceptance records | Account and organization identifiers, the console email of the person who accepted terms, and project and licensing records | United States |
| WorkOS | Console authentication and organization identity | Account, organization, and authentication data | United States |
| Stripe | Payments, subscriptions, tax, invoices, and billing portal | Billing identity, payment status, subscription data, and Relay aggregate usage mapped inside Console | United States |
| Expo, Apple, Google, and browser push services | Data-only device wake delivery | Provider token, project routing, and opaque wake payload; no message plaintext | United States |
| Better Stack | Availability monitoring and public status | Probe results, endpoint status, and sanitized operational metadata | United States |
| Google Workspace | Business email and support communications | Contact details and communication content | United States |
OpenE2EE does not give these providers message plaintext, device private keys, ratchet state, or attachment keys. Some providers can process network metadata that their role inherently requires. The Privacy Notice describes the complete boundary.
Location names the jurisdiction of the entity we contract with. Several of these providers serve requests from a global network, so a request can be handled outside that jurisdiction by the entity named.
We publish a subprocessor on this page before it begins processing customer personal data. We give at least 30 days’ notice by email to the project owner’s console address before a new subprocessor processes customer data, except where a change is needed urgently for security or service continuity, in which case we give notice as soon as practicable. You may object within that period on reasonable grounds relating to data protection, and the Data Processing Agreement sets out what follows if we cannot offer you a reasonable alternative. Send questions and objections to privacy@open-e2ee.dev.