Last updated: 2026-03-08
This page is the public register for the third-party providers that support Beamtune service delivery. It complements our Privacy Policy and is the source of truth for provider names, processing roles, locations, safeguards, and status.
| Provider | Purpose | Role | Data categories | Location | Safeguards | Policy/DPA | Status |
|---|---|---|---|---|---|---|---|
| Hetzner | Primary infrastructure hosting for application runtime, databases, and storage. | Processor | Account data, creator configuration, indexed content, conversation data, operational metadata. | United States (Ashburn) | Contractual safeguards under the Hetzner DPA and Standard Contractual Clauses where required. | Open policy | Active |
| Cloudflare | DNS, edge security, and DDoS mitigation for public web traffic. | Processor | IP addresses, request metadata, edge security telemetry. | Global edge network | Cloudflare DPA and SCC coverage for customer transfers where required. | Open policy | Active |
| OpenRouter | LLM inference routing for AI-generated responses. | Processor | Prompt content, model responses, minimal routing metadata. | United States | Provider privacy controls, configurable logging controls, and contractual safeguards where required. | Open policy | Active |
| Google OAuth | Google-based sign-in and account authentication. | Independent Controller | Google account identifier, verified email, profile image metadata. | United States / Global Google infrastructure | Google API Services policies and Google-controlled transfer safeguards where required. | Open policy | Active |
| Resend | Transactional email delivery for authentication and account notices. | Processor | Email address, message metadata, delivery status, auth email content. | United States | Resend DPA, SCC support, and contractual safeguards where required. | Open policy | Active |
| PostHog | Product analytics on public web once a consent-compliant activation model is introduced. | Processor | Usage analytics, event metadata, identifiers subject to consent controls. | Not active on public web | Will require consent-compliant activation and provider privacy controls before activation. | Open policy | Planned |
| Sentry | Application error and crash monitoring. | Processor | Error telemetry, technical diagnostics, limited user context when enabled. | United States | Provider privacy controls and contractual safeguards where required before activation. | Open policy | Planned |