SubprocessorPurposeRegionStatus
Cloudflare, Inc.Edge compute, storage, and delivery (Workers, D1, KV, R2, CDN)United StatesActive hosted infrastructure
Stripe, Inc.Billing and payment processing for subscriptionsUnited StatesActive billing processor
ResendMagic-link authentication and key delivery (transactional email)United StatesActive transactional email
Google LLCWorkspace email for founder, support, security, and sales communicationsUnited StatesActive business communications
SentryOptional SDK error telemetry when a customer explicitly enables telemetry and supplies a DSNUnited StatesOptional, customer-enabled

Self hosted deployments reduce COHESION-hosted processing, but customer support, security coordination, billing, and business communications may still use contracted service providers. Subprocessor changes are announced under the customer's DPA or order form. Questions: peyton@cohesionauth.com.