Subprocessor Map

Derived from registers/subprocessors.md (UK GDPR Art 28, control GOV-02; reconciled 2026-07-04). Signed DPAs are Tier 2 (restricted, pointed to — not stored). DPA status is honestly OPEN across the board (none signed; counsel C20). No real user data has launched — today's production data is fictional tagged seed data only. Production host is Google Cloud, europe-west2.

Who sees what

flowchart TB
  %% source: registers/subprocessors.md (2026-07-04 reconcile)
  partile["Partile production<br/>GCP partile-prod (europe-west2)"]

  subgraph active["Processors / subprocessors — active today"]
    gcp["Google Cloud<br/>hosting, DB, cache, jobs, secrets, logs"]
    linkedin["LinkedIn — OIDC identity"]
    cloudflare["Cloudflare — edge; network metadata only"]
    apple["Apple — signing/distribution<br/>(EAS retired 2026-06-28)"]
    sentry["Sentry — crash/error monitoring;<br/>PII-free-by-construction telemetry"]
  end

  subgraph gated["Integrated, key-gated"]
    anthropic["Anthropic Claude —<br/>minimized prompt fields only"]
  end

  subgraph flightdata["Flight-data providers<br/>(flight number + date only; NO user identity sent)"]
    airlabs["AirLabs — PRIMARY since 2026-06-28"]
    adb["AeroDataBox — fallback;<br/>subscription lapsed, no processing"]
    aeroapi["FlightAware AeroAPI —<br/>trial approved 2026-07-04, pending signup"]
  end

  subgraph tooling["Tooling vendors — no end-user personal data"]
    zai["Z.ai / GLM — AI executor;<br/>code + specs only; PRC vendor:<br/>cross-border analysis REQUIRED<br/>before any personal data (OPEN)"]
    runpod["RunPod — GPU rental; synthetic/<br/>public data only; SOC 2 Type II;<br/>secure-cloud tier only"]
  end

  subgraph planned["Planned / future — no data today"]
    pdl["PDL (deferred)"]
    zoominfo["ZoomInfo (deferred)"]
    push["Push provider"]
    analytics["Analytics/BI"]
  end

  partile -->|"all persisted production data<br/>(mock seed only today)"| gcp
  partile -->|"OIDC sub, email, name, picture"| linkedin
  partile -->|"network metadata"| cloudflare
  partile -->|"app metadata; no end-user PII"| apple
  partile -->|"closed-enum scanner-failure codes;<br/>structurally cannot carry PII"| sentry
  partile -->|"display name, headline, intent tags;<br/>bounded interview turns"| anthropic
  partile -->|"flight number + date"| airlabs
  partile -.-|"dormant"| adb
  partile -.-|"no flows yet"| aeroapi
  partile -.-|"source code, specs, prompts"| zai
  partile -.-|"experiment code; no prod data"| runpod
  partile -.-> pdl
  partile -.-> zoominfo
  partile -.-> push
  partile -.-> analytics

Register snapshot

Vendor	Status	Region	DPA / safeguards
Google Cloud	Active — production host	europe-west2	OPEN (C20)
LinkedIn (OIDC)	Active — identity	—	OPEN
Cloudflare	Active — edge only	global edge	OPEN; token rotation action open
Apple	Active — signing/distribution (EAS retired)	US	OPEN
Sentry	Active — PII-free telemetry only	US	OPEN (standard DPA available, not reviewed)
Anthropic (Claude API)	Integrated, key-gated; not live	TBD	OPEN
AirLabs	Active — primary flight data; no user identity sent	global	OPEN; Art 28 applicability itself OPEN
AeroDataBox (api.market)	Dormant — subscription lapsed	global	OPEN; re-confirm before re-enable
FlightAware AeroAPI	Trial pending signup (provider bake-off)	US	OPEN
Z.ai / GLM	Active — executor tooling; no personal data permitted	PRC — cross-border flag	OPEN — transfer analysis required first
RunPod	Active — GPU experiments; no prod/user data	US	SOC 2 Type II (2025-10), GDPR/HIPAA (2026-02) attested; pointers to file Tier-2 (OPEN)
PDL / ZoomInfo	Planned, deferred; not contracted	TBD	planned (C26)
Push / Analytics	Future	TBD	not started

AWS no longer appears in the register: it was an earlier staging target that was never adopted and never processed production or user data — the historical record lives in technical/infrastructure-and-deployment.md.

New vendors follow policies/vendor-and-subprocessor-policy.md; the CFO's vendor-spend.md and renewal-calendar.md track the commercial side of the same vendor set. Transfer mechanisms (Art 44–49) are open under PRIV-11 / counsel C15; the Z.ai PRC question is folded into C20.