[{"name":"Mistral La Plateforme","purpose":"LLM extraction & analysis","data_processed":"contract text, user prompts","location":"France","dpa_url":"https://mistral.ai/terms/#data-processing-agreement"},{"name":"Resend","purpose":"Transactional email","data_processed":"names, email addresses","location":"Germany","dpa_url":"https://resend.com/legal/dpa"},{"name":"Mollie","purpose":"Payment processing","data_processed":"billing details, partial card metadata","location":"Netherlands (EU)","dpa_url":"https://www.mollie.com/legal/data-processing-agreement"},{"name":"Sectigo EU Qualified Timestamping (TSA)","purpose":"RFC-3161 timestamping for the native SES seal","data_processed":"document SHA-256 hash only (no document content, no signer PII)","location":"EU (eIDAS qualified trust service / EU Trusted List)","dpa_url":"https://www.sectigo.com/legal/data-processing-addendum"},{"name":"Railway","purpose":"Hosting + object storage + Postgres + Redis","data_processed":"application data, customer content","location":"EU region (see runbook)","dpa_url":"https://railway.com/legal/dpa"},{"name":"Sentry","purpose":"Error monitoring","data_processed":"stack traces, request IDs, IP","location":"EU region (sentry.io with eu.sentry.io ingest)","dpa_url":"https://sentry.io/legal/dpa/"},{"name":"Cloudflare R2","purpose":"Sealed-document disaster-recovery replica (INF-04)","data_processed":"sealed signed PDFs (document content)","location":"EU jurisdiction (R2 bucket configured for EU)","dpa_url":"https://www.cloudflare.com/cloudflare-customer-dpa/"}]