Subprocessor Registry

Tuturuuu uses vetted providers to host, secure, communicate, bill, observe and optionally power integrations or AI. A provider receives only data appropriate to the enabled purpose. The current registry includes Supabase, Vercel, Cloudflare, OpenAI, Google Cloud, Microsoft, Polar, Resend, and Sentry.

For each provider, Tuturuuu maintains its purpose, data categories, operating regions, privacy link and change date in the canonical registry used by product and legal coverage tests. Provider use varies by customer configuration and selected integrations.

AI model providers are engaged only when a workspace uses an enabled model. Integration providers are engaged only when users connect or invoke the integration. Tuturuuu evaluates contractual, privacy and security controls and propagates supported no-training and retention options. Customers may contact privacy@tuturuuu.com for current transfer information or contractual objection procedures.

The registry identifies providers that may process data; it is not a statement that every customer uses every provider or that every provider acts as a processor for every activity. Polar may act independently for merchant-of-record transactions. AI, communications and integration providers depend on enabled functionality and routing.

Cloudflare services may support application execution, durable collaboration state, file storage and realtime/media delivery in addition to network security. Confirm the service-specific data flow, enabled region and contractual safeguards before making residency, retention or no-training commitments. Material changes follow applicable contractual notice and objection rights; requests can be sent to privacy@tuturuuu.com.