Subprocessors
Last reviewed: 2026-04-26 · Version: 2026-04-26
These are the third parties that process personal data on behalf of CareBridger. We give 30 days’ notice before adding a new subprocessor by updating this page; account owners may object in writing to privacy@carebridger.com.
| Vendor | Purpose | Region | Reference |
|---|---|---|---|
| Cloudflare (D1, KV, R2, Workers, Durable Objects) | Compute, primary database, blob storage, session/state KV | Global edge (data-locality-aware) | ADR-0001 through ADR-0008 |
| Postmark | Transactional email (verify, reset, invitations, security) | United States | ADR-0025 |
| Sentry | Server- and client-side error reporting | European Union (sentry.io EU instance) | ADR-0010 |
Any vendor referenced via a binding in backend/src/env.ts must appear in this list. CI fails any PR that adds a new vendor without updating this page.