Sub-processor List & Records of Processing

Effective: 2026-07-01

Categories of sub-processors used to provide bnoula (specific vendors depend on your configuration):

| Purpose | Sub-processor (typical) | Data |

|---|---|---|

| Cloud hosting / database | Neon (PostgreSQL) + serverless host | All service data |

| Card payments | Stripe, PayPal | Tokenized payment refs, billing |

| Crypto settlement | NOWPayments / OxaPay / Cryptomus | Payment metadata (no card data) |

| Messaging | Meta WhatsApp Cloud API, SMS provider, SMTP/IMAP email | Recipient contact + message content |

| AI | Anthropic, Google (Gemini) | Prompt content you submit |

| Error monitoring | (if enabled) | Diagnostic logs |

We impose data-protection obligations on each. Records of Processing (RoPA) summary: purposes = service delivery, billing, security, compliance, and marketing (with consent); data subjects = account holders, their staff, and the end-customers/leads you process; retention = per the Retention Policy; transfers = per DPA §6. Contact [legal contact — set LEGAL_CONTACT_EMAIL] for the vendor specifics of your deployment.