Policy

Subprocessor Registry

Version 0.1 · Last reviewed 2026-07-01 · Sandbox draft

Sandbox draft

Intended production subprocessors with DPAs at production onboarding. Sandbox routes no data to any of these — all state is in-memory locally.

The Cooperative shares personal data only with the third parties below, and only for the purposes described. Adding a new subprocessor requires a 30-day advance notice period during which Members may object; removal or replacement follows the same window.

Vercel (Inc.)

Signed at production onboarding

Application hosting, edge network, image optimization.

Data categories

· Identity + contact
· Usage telemetry

Jurisdiction

United States (SOC 2 Type II attested)

Added

2026-07-01 (planned at production launch)

Managed Postgres provider (TBD)

Signed at production onboarding

Primary datastore for all cooperative records.

Data categories

· Identity + contact
· Contribution record
· Financial
· Audit log

Jurisdiction

United States (provider selection pending — Neon / RDS / Vercel Postgres candidates)

Added

2026-07-01 (planned at production launch)

Stripe

Signed at production onboarding

Payment processing for client contracts + Stripe Connect for talent payouts.

Data categories

· Financial (payout destinations, contract amounts)
· Identity + contact (name, email, tax ID for 1099 reporting)

Jurisdiction

United States + Ireland (SOC 1 + SOC 2 attested)

Added

2026-07-01 (planned at production launch)

HubSpot

Signed at production onboarding

CRM for client relationships + deal pipeline.

Data categories

· Identity + contact (client contacts, submitter contacts)
· Contribution record (deal notes, engagement history)

Jurisdiction

United States (SOC 2 Type II attested)

Added

2026-07-01 (planned at production launch)

Auth provider (TBD)

Signed at production onboarding

Authentication + session management.

Data categories

· Identity + contact (email, hashed password)

Jurisdiction

Provider selection pending — Clerk / Auth.js / WorkOS candidates

Added

2026-07-01 (planned at production launch)

Email delivery (TBD)

Signed at production onboarding

Transactional email (auth, order confirmations, notifications, milestone deadlines).

Data categories

· Identity + contact (email, notification body)

Jurisdiction

Provider selection pending — Resend / Postmark / SendGrid candidates

Added

2026-07-01 (planned at production launch)

Meeting transcript providers (member-configured)

Signed at production onboarding

Ingestion of meeting recordings + transcripts for the internal minutes rail. Only when a Member chooses to connect their own account.

Data categories

· Meeting content (audio, transcript text, attendee list) — only for meetings the Member uploads

Jurisdiction

Varies by provider (Otter, Granola, Fireflies, Zoom Cloud Recording)

Added

2026-07-01 (planned at production launch)

Phygital print partner (TBD)

Signed at production onboarding

Fulfillment of physical canonization cards when Members request the phygital extension.

Data categories

· Identity + contact (shipping address, name)
· Contribution record (card art, tier, year — non-personal beyond name)

Jurisdiction

Provider selection pending

Added

2026-07-01 (planned at production launch)

Change notification

Members are notified of subprocessor additions or replacements at least 30 days before the change takes effect. Notification fires via the in-app notification rail plus a covenant-level email. Members who object can exercise their data rights at /profile/data-rights before the effective date.