# Data Residency and Subprocessors

Status: production pilot statement.

## Current Hosting

- API and SQLite volume: Railway production service with mounted volume.
- Screenshots: Google Cloud Storage bucket configured through `GCS_BUCKET`.
- Dashboard and landing: Cloudflare Pages.
- AI triage: Anthropic API, only when users trigger triage or an operator runs the smoke test.
- Email: Resend when email notifications are configured.
- Payments: Stripe when billing is configured.

## Current Residency Commitment

Current production is a US-oriented pilot environment. Do not commit to Canada-only, EU-only, state-only, or agency-specific residency from the shared deployment. Dedicated regional deployments require a separately provisioned API service, object-storage bucket, backup replica, and contractual addendum.

## Customer Guidance

For regulated pilots, install the widget with consent required, sensitive selectors configured, console/network/session capture disabled unless explicitly approved, and retention days set before production traffic.