Sub-processors
Last updated · 4 June 2026
To provide OriginalGuard, we use a small number of trusted third parties (“sub-processors”) that may process personal data on our behalf. We require each to protect data consistently with our Privacy Policy and applicable law.
Overview
The table below lists our current sub-processors and what they do. Entries marked “provisional” are pending a finalised vendor selection or contract and may change before or shortly after launch.
Current sub-processors
| Provider | Purpose | Processing region | Status |
|---|---|---|---|
| MongoDB Atlas (database hosting) | Primary application database storing account and operational records. | Configurable cloud region | Provisional |
| Cloudflare R2 | Object storage for user-uploaded media (profile photos, incident attachments). | Global edge / configurable | Active |
| Expo (push notification service) | Delivery of push notifications to mobile devices. | United States | Active |
| Apple Push Notification service (APNs) | Underlying push delivery on iOS devices. | United States | Active |
| Firebase Cloud Messaging (FCM) | Underlying push delivery on Android devices. | United States / global | Active |
| Application hosting provider | Runs the API and web application compute. | Configurable cloud region | Provisional |
| Email / SMS provider | Transactional messages and one-time passcodes (only when those channels are enabled). | Provider-dependent | Provisional |
| Payment processor | Subscription billing and invoicing for workspace administrators. | Provider-dependent | Provisional |
Changes & notice
Stay informed
We may add or replace sub-processors as the Service evolves. Material changes will be reflected on this page. To request advance notice of changes, email development@originalguard.com.