Draft Subprocessor List
Planned providers for the closed private beta, with activation and contract details still subject to verification.
NON-EFFECTIVE DRAFT — FOR COUNSEL REVIEW ONLY. Oddseal does not yet have a contracting legal entity. This text creates no contract, representation, warranty, or legal commitment. Entity, address, governing law, dispute forum, transfer terms, and final approval remain open.
Core hosting and processing
- Cloudflare — static web delivery, edge security, DNS, private R2 document storage, and encrypted database-backup storage. R2 uses an APAC placement hint, which is not a residency guarantee.
- Railway — one API service, one private PDF engine, one private PostgreSQL service, and one private database-backup cron for the beta. Document bytes are processed by the API and engine; account, workspace, document metadata, audit, and job data are stored in Railway PostgreSQL. The private-beta profile has outbound access and fewer containment controls than the production-shaped Compose profile.
Communications and operations
- Resend — verification and password-recovery email delivery, plus public waitlist Segment management using email addresses and subscription state.
- PostHog — optional, manually allowlisted content-free product events and scrubbed application exceptions. Browser analytics uses memory-only identifiers.
- Grafana Cloud — content-free operational metrics, logs, alerts, and synthetic results when provisioned.
Disabled for this beta
Polar billing and external AI providers are disabled for the closed private beta and are not listed as active document processors. Public signup and team features are also disabled.
Open verification
The future Oddseal entity must confirm each provider's contracting entity, service region, transfer terms, notice period, and production activation before adopting this list. Contact support@oddseal.com with questions.