PRE-LAUNCH REVIEW DRAFT
Subprocessor Register
A transparent launch register. Planned providers are not represented as active until contracting and deployment are complete.
Not yet effective. The operator legal name, registered address, privacy contact, governing law and launch subprocessors must be confirmed before production. This draft describes the product as currently implemented and must receive jurisdiction-specific legal review.
- Status
- Internal review
- Last revised
- August 18, 2026
Production providers
No production subprocessor is approved in this pre-launch environment. The table records the intended architecture and unresolved vendor decisions.
| Provider | Purpose | Region | Status |
|---|---|---|---|
| DigitalOcean (planned) | Compute, managed database, private object storage and backups | Frankfurt, EU | Planned; contract and exact services pending |
| Email provider | Transactional email, invitations and verification | EU preferred | Not selected |
| Payment processor | Subscription billing; no raw card data in FileMentra | Pending | Not selected |
| Error monitoring | Redacted diagnostics and reliability | Pending | Not selected |
Change notice
The planned customer process gives at least 30 days’ advance notice before a new subprocessor handles customer personal data, except an infrastructure change that adds no new provider or data category. Customers may raise a documented data-protection objection during that period.