Subprocessors
Services that may process personal data for Origami. An AI provider receives customer content only when an enabled route selects that provider.
| Provider | Purpose | Processing location | Terms |
|---|---|---|---|
| Vercel | Application hosting, serverless execution, and platform logs | Singapore execution region; control-plane and subprocessors may involve the United States and other locations | Vendor terms |
| Supabase | Managed PostgreSQL database and backups | Singapore (AWS ap-southeast-1); vendor subprocessors may process support and account data elsewhere | Vendor terms |
| DeepInfra | AI inference for enabled model routes | Vendor-determined infrastructure; verify route/model-specific onward providers | Vendor terms |
| DeepSeek | AI inference for enabled DeepSeek routes | China and vendor-disclosed locations; binding transfer safeguards require legal approval | Vendor terms |
| Z.AI | AI inference for enabled Z.AI routes | Generally Singapore under its API DPA | Vendor terms |
| DigitalOcean | Optional AI inference route; currently not enabled in production | Selected inference infrastructure and disclosed subprocessors, including possible United States processing | Vendor terms |
| Meta / WhatsApp | Customer-initiated support conversations outside the Origami application | Vendor-determined locations and subprocessors | Vendor terms |
Transactional email, Google sign-in, payment processing, and external telemetry are not currently enabled in production. Their providers must be added here and assessed before activation.