Cairn Processor Register
Version: subprocessors-1.0.0. This is the register prepared for founder verification before legal activation. Each account's actual contracting party, accepted agreement, configured region and retention must be confirmed in the release evidence; provider documentation alone is not proof that Cairn executed an agreement.
Platform providers
| Provider | Purpose and data | Location and retention qualification | Agreement/reference |
|---|---|---|---|
| Anthropic, PBC | API generation, summaries, translation and analysis: task context, relevant knowledge and conversation excerpts | No guaranteed regional processing in this pilot. API inputs/outputs ordinarily removed within 30 days, with feature, safety, legal and separately agreed exceptions | https://www.anthropic.com/legal/commercial-terms ; https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data |
| OpenAI OpCo, LLC | API fallback generation, knowledge embeddings and audio transcription | Endpoint-specific controls; generation/embedding abuse-monitoring retention ordinarily up to 30 days, subject to documented exceptions. Transcription differs. store:false does not establish account-wide zero retention | https://openai.com/policies/business-terms/ ; https://developers.openai.com/api/docs/guides/your-data |
| Laravel Holdings Inc. (Laravel Cloud) | Marketing/portal compute, managed database/cache and queue infrastructure: hosted data and operational records | Production applications in AWS us-east-2. Both attached Neon serverless PostgreSQL clusters were verified with seven-day PITR retention on 14 October 2026. Expired history ages out under the provider policy; restored copies require deletion tracking | https://laravel.com/cloud/legal/terms ; https://laravel.com/cloud/docs/resources/databases/postgres |
| Neon, LLC (Databricks, Inc. group), through Laravel Cloud | Downstream serverless PostgreSQL: application database, replicas and recovery history | Production resource region us-east-2; seven-day PITR retention verified for both production clusters on 14 October 2026. A restore creates a separate copy which must be tracked, secured and deleted after its purpose ends | https://neon.com/platform-terms ; https://laravel.com/cloud/docs/resources/databases/postgres |
| Amazon Web Services, Inc., through Laravel Cloud and its database service | Downstream cloud compute/storage/networking for hosted application and database data | AWS us-east-2 for the observed applications/database resources. Account-specific downstream agreement, diagnostics and recovery retention must be confirmed in vendor evidence | https://laravel.com/cloud ; https://aws.amazon.com/compliance/data-privacy/ |
| Cloudflare, Inc. | Edge/TLS delivery, security and R2 object storage: request metadata, screenshots, uploads and exports | R2 production buckets have default jurisdiction. This does not guarantee US-only or EU-only storage. Private media must remain protected; object deletion/lifecycle and edge retention require verification | https://www.cloudflare.com/terms/ ; https://www.cloudflare.com/cloudflare-customer-dpa/ |
| DigitalOcean, LLC | Customer-content processing on the self-managed OCR/search hosts, routing through the egress gateway, and the managed media service for PDF text extraction, PDF guide rendering and video rendering from prepared frames | Cairn egress and search droplets are verified in nyc3 (New York). The dedicated media host is verified in sfo2 (US) on 14 October 2026: isolated transient processing files are cleared on completion, failure, timeout and restart; operational logs exclude document contents and tokens. Cairn retains sources, knowledge and completed exports separately under workspace retention. OCR hosting and endpoint-to-host mappings remain verification items. Search copies follow source deletion; OCR transient images and proxy logs need operational retention verification | https://www.digitalocean.com/legal/terms-of-service-agreement ; https://www.digitalocean.com/legal/data-processing-agreement |
| Stripe, Inc. | Organization billing, invoices, payment setup and tax: business/billing data and Stripe-held card details | Provider-controlled processing and legally required payment/accounting retention; no customer chat or captured knowledge is needed for billing. Some payment/legal processing is on Stripe's own behalf | https://stripe.com/legal/ssa ; https://stripe.com/legal/dpa |
| Plus Five Five, Inc. d/b/a Resend | Transactional messages and selected support/campaign email: recipients, headers and authorized message content | Resend is configured in production; inbound support is not provisioned. Provider documentation places stored data in the US, ordinarily retains email/log data 30 days on Free/Pro/Scale and removes remaining customer data within 90 days after termination. Plan and executed agreement require account verification | https://resend.com/legal/terms-of-service ; https://resend.com/legal/dpa ; https://resend.com/legal/subprocessors ; https://resend.com/security |
| Functional Software, Inc. d/b/a Sentry | Error/performance reporting: event metadata and configured diagnostic context | US ingestion configured; default PII and SQL bindings disabled, tracing enabled. No browser replay integration was found. Account retention, support access regions and scrubbing remain to be verified; diagnostics can contain personal information | https://sentry.io/privacy/ ; https://sentry.io/legal/dpa/ |
Optional services and instructed recipients
Before enabling a connection, record the relevant legal entity, data exchanged, location/retention terms and role. Candidate services include Twilio (voice/SMS), Meta (WhatsApp/Messenger/Instagram), Telegram, Slack, HubSpot/Pipedrive and other CRM providers, Shopify/WooCommerce and other stores, Atlassian Confluence, Zendesk, Notion, Segment, Google/Microsoft identity, Apple APNs and Google Firebase messaging. Customer-controlled MCP servers and HTTP tools are also recipients. Customer-supplied credentials do not by themselves determine whether the service is Cairn's subprocessor or Customer's independently engaged recipient. No connection may broaden the customer's prohibited-data exclusions.
The pilot cannot call optional integrations live until their actual data flow is verified. LiveKit is not provisioned; desktop/mobile/developer distributions and individual integrations retain the availability qualifications on the marketing site. Downstream infrastructure providers must be included in the vendor review, using each provider's own register. Resend lists AWS for hosting/sending, PlanetScale/Supabase for databases and RunPod for sampled-email safety processing; normal Emails API traffic is not routed to its Anthropic AI Editor. Its ordinary change notice is 14 days, so Cairn must independently meet its 30-day commitment or document the permitted urgent exception. Capture the current upstream registers and determine which downstream services receive Cairn data rather than assuming every listed vendor receives all content.
Change notices, objections and retention
Owners receive at least 30 days' advance notice of ordinary changes before new processing, with a data-protection objection process under the DPA. Urgent security/legal exceptions require prompt notice and a reason. Queued delivery receipts record the notice version, effective date, recipient and outcome without copying customer content. Contact privacy@cairn.how to object or request the current evidence.
Customer content retention follows the configured service policy, deletion map and separately verified provider/backup expiry. Training exclusion, encryption and input masking are not promises of universal zero retention. Unverified fields in this prepared register block publication until founder review supplies a complete evidenced register.