Subprocessor Disclosure

Subprocessor Disclosure

Infrastructure

Render may host web, worker, cron, and PostgreSQL services. Cloudflare R2 may store private source and report objects.

Payments

Stripe processes checkout, subscriptions, invoices, and billing portal operations. Phantom does not store full card numbers.

Communications and document services

The configured SMTP provider may deliver account and completion email. Google Cloud Vision may process scanned pages when enabled. Cloudflare Turnstile may verify anti-bot challenges. ClamAV may scan uploads when enabled.

Configuration matters

Only providers actually configured in the production environment process data. Readiness pages disclose missing services instead of pretending they are connected.