Subprocessors and Service Providers

Status: Effective
Version: 2026-09-21-v1
Effective date: 2026-09-21

This legal instrument is currently owner-adopted in English and French. The English text is shown for this interface language until a reviewed convenience translation is available.

Supabase, Inc.

Production database, authentication and private file storage. Current iKOTB production region: us-west-2, United States. Supabase publishes a Data Processing Addendum and security/compliance information.

Vercel Inc.

Web application hosting and request execution/delivery. Vercel publishes a Data Processing Addendum that includes Canadian privacy-law terms for covered plans and written subprocessor obligations.

Amazon Web Services, Inc.

Transactional application email and Supabase Auth SMTP through Amazon SES. iKOTB SES is configured in ca-central-1, Canada. AWS publishes a global Data Processing Addendum.

Google LLC / Google Workspace

Business email when a person voluntarily sends information to an iKOTB/KOTB Group mailbox. Google Workspace publishes a Cloud Data Processing Addendum and subprocessor information. It is not integrated into iKOTB as an application API.

Cloudflare, Inc.

Authoritative DNS for ikotb.com. Current application records are DNS-only and Cloudflare does not currently proxy iKOTB application traffic. Cloudflare publishes a Data Processing Addendum and subprocessor list.

Inactive and changes

Stripe live billing is inactive. Resend has been retired. No third-party behavioural analytics, advertising or session-recording provider is active. GitHub hosts source/CI and is not in the ordinary runtime customer-data path. Material provider changes are subject to the internal provider-assessment/privacy-impact process.