Operational disclosure
Service providers and subprocessors
This register identifies providers currently selected or planned for MaterialDock. Final contracts, production regions, and legally required disclosures must be verified before public launch.
| Provider | Purpose | Data involved | Current status |
|---|---|---|---|
| Railway | Application, PostgreSQL, workers, private object storage, and networking | Application records, database records, and private stored files | Active in staging in US West; production plan, region, recovery, retention, and contract review remain pending |
| Cloudflare | DNS and TLS services when enabled, plus independent R2 file-backup and operational-log storage | Private backup objects, privacy-filtered operational logs, and request or security metadata for enabled edge services | Active in staging with WNAM R2 buckets; a separate US-jurisdiction production configuration remains pending |
| Stripe | MaterialDock subscription checkout and billing management | Company billing contact and Stripe subscription identifiers; payment credentials remain with Stripe | Test-mode lifecycle verified; production account, Price, tax, renewal, and customer-visible configuration remain pending |
| Resend | Transactional account and application email delivery | Email recipient, transactional message content, and delivery metadata | Active in staging from North Virginia with tracking not configured in the UI; production review remains pending |
| OpenAI | Optional receipt and invoice extraction before mandatory user review | A user-selected source document and the structured extraction output | Selected integration with provider storage disabled where supported; extraction remains disabled pending a dedicated provider project and approved controls |
| Better Stack | External uptime and readiness checks, sanitized error reporting, backup heartbeat, and incident notification | Public endpoint status, sanitized error metadata, heartbeat status, and notification-recipient information | Active in staging in the EU; production region, retention, contract, downstream processing, and notification review remain pending |
Document processing notice
Original uploads remain private company records. OpenAI extraction is optional and provider output never creates project or purchase data until an authorized user reviews and confirms it.
Advertising and analytics
MaterialDock does not currently use advertising trackers or a product analytics service. Authentication-library telemetry is disabled. Necessary browser storage is limited to account, security, and short-lived workflow functions; provider-operated service telemetry remains part of the provider review above.