Legal · review

Subprocessors

G1 review list (not a signed DPA pack): Stripe (payments), Supabase (database/storage), Vercel (compute), Resend (email, G2), Google Calendar / Microsoft Graph (G2, OAuth), PAL model providers (redacted context). Statuses stay PENDING_REVIEW until DPA refs exist.