What this means
The Trust Center lists Cloudflare R2, DigitalOcean, Hetzner, Google Workspace, PostHog, Linear, Oneleet and OpenRouter. It labels R2 and PostHog US with PII, and DigitalOcean as the main database with PII. The 14 September 2026 DNS review places the website and cloud front door on Cloudflare anycast; it cannot locate the origin. Frankfurt by default remains a company claim, not verified data residency. The reported TXT/MX/SPF review also identifies Amazon SES, MailerLite, Firebase (activepieces-b3803) and Oneleet alongside Google Workspace. These are vendor relationships, not ownership evidence; exact processing roles and regions are not established by DNS. No public DPA PDF was found in the reported checks.