Sub-processors
| Sub-processor | Category | Data processed |
|---|
| AWS KMS | Signing | Key operations only (no asset bytes) |
| Arbitrum One / Alchemy | Blockchain | Merkle roots only (no PII) |
| OpenTimestamps calendars | Timestamping | Merkle roots only (no PII) |
| Stripe | Billing | Email, payment method |
| Resend | Email | Email address for magic-link authentication |
| Cloudflare | CDN / DNS | Request metadata |
Data minimisation
- Asset bytes are processed in-memory and not logged
- Full digests passed to KMS are not logged
- Raw API tokens are not logged
- Customer PII is not written to blockchain
Full sub-processors list →
