{
  "$schema": "https://allforprojects.com/.well-known/sub-processors.schema.json",
  "controller": {
    "name": "AllForProjects Limited",
    "registration": "Registered in England & Wales, Company No. 17219055",
    "contact": "privacy@allforprojects.com"
  },
  "lastUpdated": "2026-06-17",
  "noticePeriodDays": 30,
  "subProcessors": [
    {
      "id": "railway",
      "name": "Railway",
      "purpose": "Application hosting and managed Postgres database",
      "region": "EU (Amsterdam)",
      "transferMechanism": "UK adequacy",
      "url": "https://railway.com"
    },
    {
      "id": "cloudflare",
      "name": "Cloudflare",
      "purpose": "CDN, DDoS protection, WAF, Turnstile bot screen, R2 object storage",
      "region": "EU jurisdiction",
      "transferMechanism": "UK adequacy",
      "url": "https://www.cloudflare.com"
    },
    {
      "id": "anthropic",
      "name": "Anthropic (Claude)",
      "purpose": "AI inference: quote drafts, photo diagnosis, lead parsing, receipt OCR",
      "region": "US",
      "transferMechanism": "UK Extension to EU-US Data Privacy Framework",
      "url": "https://www.anthropic.com"
    },
    {
      "id": "openai",
      "name": "OpenAI (Whisper)",
      "purpose": "Audio transcription for voice memos and short-video audio",
      "region": "US",
      "transferMechanism": "UK Extension to EU-US Data Privacy Framework",
      "url": "https://openai.com"
    },
    {
      "id": "resend",
      "name": "Resend",
      "purpose": "Outbound transactional email (lead notifications, send-quote, send-invoice)",
      "region": "EU / US",
      "transferMechanism": "UK Extension to EU-US Data Privacy Framework",
      "url": "https://resend.com"
    },
    {
      "id": "apple-app-store",
      "name": "Apple App Store",
      "purpose": "iOS mobile-app distribution (planned)",
      "region": "US",
      "transferMechanism": "UK Extension to EU-US Data Privacy Framework",
      "url": "https://www.apple.com/legal/internet-services/itunes/"
    },
    {
      "id": "google-play",
      "name": "Google Play",
      "purpose": "Android mobile-app distribution (planned)",
      "region": "US",
      "transferMechanism": "UK Extension to EU-US Data Privacy Framework",
      "url": "https://policies.google.com/privacy"
    }
  ]
}