Security

Who else touches the data.

The privacy page says this site loads nothing from another host. That is true. That is a claim about what your browser fetches. This is the same claim pointed the other way.

01 / The list

Nobody, yet

The table ships empty. When a row arrives it lands here, in these columns, thirty days early.

Sub-processors with access to customer data
Sub-processorPurposeData categoriesLocationDPA
None as of

No third party processes customer data. There is no customer data yet. Nothing is on a public road yet. The platform is still being built. The only personal data we hold is what you send us on the contact form. We write it to a file on a server we run, not to a form service.

02 / What appears here first

Four rows, in this order

Hosting and edge delivery

Whoever serves this site and the platform. An edge network ends the encryption (it terminates TLS) and sees every request. So it goes on this list, even though your browser never loads from anywhere else.

Database and object storage

Where the record of a place and a time lives. Imagery lives here too, while we keep it.

Email delivery

Addresses we reply to, and what is in the reply.

Error and uptime monitoring

Stack traces and request details, if we ever run one. There is none today, and none on the public site by design.

03 / Notice

How you find out

We post a change here at least 30 days before a new sub-processor touches data.

There is no subscribe widget here. That would be a third-party request on a page about third parties. Ask us and we will email you instead.

The build stamps the date above and nobody types it. If it stops moving, something stopped running.

security@forgecore.aiThe document register