| Provider | Purpose | Typical data |
|---|---|---|
| Cloudflare | Web delivery, Workers, storage, networking, security | IP/device data, requests, account and project data processed by Workers |
| Supabase | Authentication and PostgreSQL data services | Identity, account, project, approval, and application records |
| OpenAI | Language and reasoning models when selected | Prompts, relevant project context, tool results, and output |
| Anthropic | Language and reasoning models when selected | Prompts, relevant project context, tool results, and output |
| Deepgram | Speech transcription and synthesis | Audio streams, transcripts, and voice configuration |
| Expo | Mobile build and distribution operations | Build metadata, device/build diagnostics, release artifacts |
| Apple | App distribution, device services, and Sign in with Apple | Apple identifiers, app/build data, store transactions if enabled |
| OAuth identity and user-authorized connected services | Google identifiers and data within granted scopes | |
| Stripe | Checkout, subscription, reload, tax, fraud, invoices, and billing portal when paid billing is enabled | Contact, billing, payment, subscription, tax, and fraud signals |
| Sentry | Error and performance monitoring when enabled | Technical diagnostics, device/app context, redacted request data |
Changes
We will update this list before adding a materially different core subprocessor and provide notice where a customer agreement requires it. Customer-connected apps act at the customer’s direction and are not necessarily Genesis subprocessors.