TRUST CENTER · PRELIMINARY INVENTORY
Subprocessors & service providers
A subprocessor is a third party used by a data processor to process personal data for a customer. For example, a video service may use a hosting or transcription provider.
Our current provider: Cloudflare
Cloudflare, Inc. provides website delivery, API execution, and D1 project-metadata storage for the preview. Depending on the service, it may process request information such as IP addresses and URLs, and project names, IDs, status, and timestamps.
Cloudflare is our current infrastructure service provider. Its precise processor or subprocessor role depends on the relationship and applicable agreement. This preliminary inventory is not an executed data-processing agreement.
Location and transfers
Cloudflare operates a global service. Cutloom has not established a Canada-only processing or storage commitment. Our Vancouver office location does not describe where data is processed.
Exact service-specific processing locations, contractual safeguards, retention, and any transfer arrangements must be reviewed before private customer data is accepted.
Not connected yet
No runtime AI/transcription, payment, email-delivery, or authentication provider has been selected and integrated into this preview. Planned vendors are not listed as active subprocessors. Development tools and software libraries are not automatically customer-data subprocessors.
Changes and due diligence
Before adding a provider, document the service, data categories, purpose, location, safeguards, and contractual role. A customer notification and objection process will need to be defined with the final data-processing terms; no subscription to such notices is currently offered.
Outsourcing does not remove an organization’s responsibility for protecting personal information. The current inventory should be checked against actual deployments and contracts before launch.