Article 28 register
Subprocessors
The third parties that process data on our behalf, what each one does, and where it sits. This page is the record: if the list changes, it changes here.
What this covers
#These are the providers involved in running the service. Your own readers' payments settle directly on a public blockchain between a buyer's wallet and yours, which is not a processing relationship we can insert a provider into, and no card data exists anywhere in the product because there are no cards.
| Provider | What it does | Where |
|---|---|---|
| Datalix | The primary host. Runs the application, the PostgreSQL database, the identity provider and the API gateway. Your data lives here. | Frankfurt, Germany (EU) |
| Amazon Web Services | Encrypted secrets storage, container registry, and encrypted nightly database backups. Backups leave the EU: they are written to storage in Tokyo, encrypted before they leave the host. | ap-northeast-1 (Tokyo, Japan) |
| Cloudflare | DNS, TLS termination for customer routing, edge protection | Global anycast |
| PostHog | Product analytics on portal usage (EU ingest) | European Union |
| Circle | Stablecoin settlement rail and managed payout wallets. Never holds naulon customer funds in custody. | United States |
| The inference provider behind catalog enrichment, semantic search and the hosted reading agent. Receives extracted article text from sites that have not switched off body search. On a hosted-agent run it also receives the buyer's question and the text of the articles that run paid for. Inference only: submitted content is not used to train models. Switch off body search for a site and that site's text stops being sent. | United States and other Google regions | |
| Resend | Transactional email delivery: account, security, billing and notification mail. Receives recipient addresses and message content. | United States |
When the list changes
This page is the source of record and is versioned with the product. Material changes are published to the changelog. If your own data-protection obligations require advance notice of a new subprocessor, tell us and we will give it.
This English version is the governing text. Translations are provided for convenience only; if they differ, the English controls.