Data processing inventory
RLSOK service providers
Last updated 11 September 2026. This inventory describes service providers and retained payment-processing records. New paid subscriptions are temporarily unavailable.
- Vercel Inc.: public Next.js web hosting and server-side public-site request processing. A private Vercel Blob store in the
iad1(Washington, D.C., USA) region holds a separately encrypted recovery snapshot. - Cloudflare: tunnel and edge protection for the API path, DNS, and inbound Email Routing.
- RackNerd LLC: the production KVM VPS for the API, account, organization, control-plane, Evidence, audit, local backup, and commercial records. The assigned production network location was verified as Buffalo, New York, USA. PostgreSQL is self-hosted on this same VPS, not a separate managed-database service.
- GitHub: source, releases, issues, security advisories, and active GitHub OAuth sign-in.
- Google: active Google OAuth sign-in and the monitored destination mailbox for inbound support correspondence. Google Analytics provides optional public-page and evaluation-entry statistics after visitor consent. It does not receive access-request form contents.
- Paddle (payment testing and earlier records): used for Sandbox payment and subscription testing. New Paddle purchases on rlsok.com are unavailable. Earlier testing or transaction records may remain for billing support, disputes, security, or legal retention. For any receipt naming Paddle, it remains the Merchant of Record for that transaction.
Provider privacy and transfer terms apply to their processing. RLSOK remains responsible for its own instructions and product-data use. The exact post-deployment Google configuration and the applicable China-specific cross-border mechanism must be verified before Live charging. Local rolling database copies remain on the RackNerd VPS; the verified offsite snapshot is client-side encrypted before upload and also receives Vercel's provider-side encryption at rest.