Supabase
Purpose: Authentication, Seoul database and authorization metadata
Data: Account, tenant, entitlement and proof metadata
PUBLIC RECORDSUBPROCESSORS
The services allowed to touch each class of data.
Current as of 2026-08-30. A provider appearing here does not mean every feature is live; the status page states the active deployment mode.
Vercel
Purpose: Website and serverless application hosting
Data: Requests, operational logs and application metadata
Cloudflare
Purpose: DNS, R2 object storage and content-disarm worker
Data: Uploaded source bytes and sanitized derivatives
RunPod
Purpose: Scale-to-zero GPU OCR
Data: Sanitized document candidates and processing telemetry
Paddle
Purpose: Sandbox billing; merchant-of-record services if live is approved
Data: Billing identity, checkout and subscription events
Resend
Purpose: Transactional inquiry delivery
Data: Inquiry name, work email, company and message
Purpose: OAuth identity provider
Data: Google account identity and authentication events
Change notice
Material processor changes will be recorded here before they apply to live customer processing. Contact privacy@tavonel.com for a data-processing review.