Aimé

Subprocessor and Transfer Register

Draft provider inventory; production accounts, regions, and transfer mechanisms require verification before counsel approval.

Launch draft — pending technology/privacy counsel approval. Version: 2026-08-23-draft. This draft is not represented as legal advice or counsel approval.

Core infrastructure

  • Vercel — application hosting, delivery, and operational logs.
  • Supabase — authentication, PostgreSQL database, and private object storage.
  • Trigger.dev — background and scheduled workflow execution.

Payments and communications

  • Stripe — POC subscription payments, billing records, and fraud controls.
  • Transactional email provider configured through the authentication and support stack — account and service messages.

AI and media operations

  • OpenAI — requested text, vision, and generation features.
  • Claid — requested product-image processing.
  • Cloudmersive or the configured equivalent — stateless upload malware scanning.
  • Browserless — controlled browser-backed workflow infrastructure where enabled.

Monitoring

  • Sentry — application error monitoring with sensitive-data filtering.
  • PostHog — configured product analytics with collection controls.

International transfers

Provider entity, hosting region, transfer location, data categories, retention, and contractual transfer safeguards must be verified in the production-provider register before this draft is approved. New providers require a documented security/privacy review.