Draft Subprocessor List
Planned providers for the invitation-only service, with activation and contract details still subject to verification.
NON-EFFECTIVE DRAFT — FOR COUNSEL REVIEW ONLY. Oddseal does not yet have a contracting legal entity. This text creates no contract, representation, warranty, or legal commitment. Entity, address, governing law, dispute forum, transfer terms, and final approval remain open.
Core hosting and processing
- Cloudflare — static web delivery, edge security, DNS, private R2 document storage, and encrypted database-backup storage. R2 uses an APAC placement hint, which is not a residency guarantee.
- Railway — API and private PDF processing, private PostgreSQL, and a private database-backup cron. The API and PDF engine process document bytes; PostgreSQL stores account, workspace, document metadata, audit, and job data. The PDF engine currently has outbound network access. This draft describes provider roles, not a data residency or independently audited isolation guarantee.
Communications and operations
- Resend — verification and password-recovery email delivery.
- PostHog — optional, manually allowlisted content-free product events and scrubbed application exceptions. Browser analytics uses memory-only identifiers.
- Grafana Cloud — content-free operational metrics, logs, alerts, and synthetic results when provisioned.
Not active yet
Polar billing is disabled and is not an active document processor. Oddseal does not send document content to external AI services. Public signup and team features are also disabled.
Open verification
The future Oddseal entity must confirm each provider's contracting entity, service region, transfer terms, notice period, and production activation before adopting this list. Contact support@oddseal.com with questions.