Revision 1.1 · Effective on publication of this revision
Subprocessors
This page lists service providers that may process data to help operate Catalogix. A conditional provider is used only when the relevant feature or service is actually enabled and configured.
We update this page as our infrastructure changes.
Current service providers
Replit
replit.com
Purpose: Application hosting and Replit App Storage for private files; App Storage uses Google Cloud Storage (GCS)
Data involved: Application data, private uploaded or generated files, and operational data needed to provide the service; provider region and contractual details must be confirmed against current arrangements
PostgreSQL infrastructure
Purpose: Application database infrastructure (provider and contractual details must be confirmed)
Data involved: Account, organisation, supplier, catalogue, mapping, review, feedback, and related application records
Zoho Mail
zoho.com
Purpose: Business mailbox and reply-to correspondence, only to the extent actually used
Data involved: Business correspondence and contact details handled through that mailbox
Resend
resend.com
Purpose: Transactional email delivery only when transactional sending is activated and configured
Data involved: Recipient address and the transactional message content needed for delivery
Stripe
stripe.com
Purpose: Billing processing only when billing is enabled and used
Data involved: Billing and transaction information needed to provide billing services
Sentry
sentry.io
Purpose: Optional application monitoring, only when Sentry is configured
Data involved: Diagnostic and error-event data generated by the application, subject to the configured monitoring setup
Google Cloud Storage (GCS)
google.com
Purpose: Google Cloud Storage (GCS) supports Replit App Storage for private files; other Google services are included only if actually configured
Data involved: Private file objects for App Storage; any other data flow depends on the specific configured service
This list may change as the service evolves. Provider regions, contracts and transfer safeguards should be checked against the current arrangements; no particular region or certification is promised.
If you have questions about current providers, contact hello@catalogix.io.