cyberpidgeon| Provider | Purpose / data | Current status and location |
|---|---|---|
| Microsoft Azure | Application hosting, private PostgreSQL, backups, secret storage and operational logs | Active. Application resources in North Europe (Ireland). Vendor-wide support and processing terms also apply. |
| Resend / Plus Five Five, Inc. | Email transmission, receipt, delivery events and inbound attachment storage | Planned; delivery requires activation. Domain configuration targets eu-west-1, but this does not establish EU-only processing. |
Authoritative vendor terms: Microsoft DPA, Resend DPA, and Resend subprocessors. Resend lists subprocessors in the United States. We must assess the relevant transfer safeguards and vendor contracts before activating customer personal-data processing. This list does not assert that a particular contract has been executed.
Other infrastructure
GoDaddy manages the current domain registration and DNS; it is not the application or mailbox host. GitHub holds source code and CI, not production mailbox data. There is no payment processor integrated into the beta. Cyberpidgeon does not send message content to an LLM in its application code. Customers may connect agents or LLMs themselves and remain responsible for those integrations.
Changes
Before production processing, the executed DPA must specify advance notice and objection arrangements for subprocessor changes. Review date: September 11, 2026.