Subprocessors
Transparent vendor posture before production.
This page records the categories of third-party providers AppealLayer may use and the production publication rule.
Last updated: April 20, 2026
Current production status
No production subprocessors have been finalized for paid customer deployment in this repository state. Before production launch, Enstellis SRL should publish the legal name, service category, location, transfer mechanism, and privacy/security link for each subprocessor.
Do not name vendors in customer contracts until the actual production stack is selected and vendor data-processing terms are reviewed.
Expected categories
- hosting and application deployment
- managed Postgres database infrastructure
- private object storage for evidence files
- email delivery for notices and operational messages
- error monitoring and application diagnostics
- privacy-respecting product analytics, only after consent where required
- World ID proof verification through official World developer tooling
- queue, cache, and webhook delivery infrastructure
Notice and objections
Production customer agreements should give customers reasonable notice of new subprocessors and a practical objection process where required by GDPR Article 28 and the customer contract.