This list must be checked against the live production configuration before launch. A supplier is relevant only when its service is enabled for the customer or feature concerned.
Current principal suppliers
| Supplier | Purpose | Processing location |
|---|---|---|
| Supabase | Database, authentication and storage | Service region and supplier arrangements selected for Cortex |
| Vercel | Application hosting, delivery and operational logs | Supplier infrastructure may operate internationally |
| Stripe | Subscription and payment processing | Processed under Stripe's global service arrangements |
| OpenAI | Requested TEX drafting, analysis and transcription support | Only for enabled features and subject to configured data controls |
| Resend | Transactional and service email delivery | Supplier infrastructure may operate internationally |
Changes
StationCortex may add or replace a sub-processor where reasonably necessary. We will provide notice of a material change where required by the Data Processing Terms. Customers may raise a reasonable data-protection objection by emailing privacy@stationcortex.com.
International transfers
Where a restricted transfer requires safeguards, StationCortex will use an applicable adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful mechanism, together with supplementary measures where required.