Tersign Sub-processors

v1.0 — effective 14 July 2026. This list is incorporated into the Data Processing Addendum. We update it before adding a sub-processor; material changes are announced per DPA Section 6.

Sub-processor Purpose Location of processing
Cloudflare, Inc. Hosting and edge infrastructure for the ledger, storage (Workers, D1, R2), network security Global edge network (EU/US data-center processing; Cloudflare DPA with SCCs)
Stripe, Inc. / Stripe Payments Company Fiat payment processing and billing (acts as an independent controller/processor for payment data under its own terms) US / global
LLM API providers (currently: Anthropic, PBC) Dispute-triage assistance only, when the escalation lane is used; records payloads are digest-minimized before any model call US

No other third party receives Customer personal data. On-chain anchors contain cryptographic digests only — never personal data.