Sub-processor List
Last updated: 2026-08-25
Courier Cloud uses the sub-processors below. This page is the authoritative list: whenever a provider, region, or retention rule changes, this page changes first, and material changes are announced in-product.
| Provider | Role | Data involved | Region | Retention / training |
|---|---|---|---|---|
| Cloudflare | Hosting, storage (databases and object storage), AI Gateway | All hosted data in transit and at rest; AI request metadata only — payload logging is disabled, request/response bodies are not stored at the gateway | Global edge network | Not used for model training |
| Groq | AI model for editorial summaries (free tier) | Recent health summaries and note text, only at the moment a summary is generated | United States | Zero-data-retention mode: inputs and outputs are not retained and not used for training |
| OpenAI | AI model for editorial summaries (Pro tier) and standby writer | Recent health summaries and note text, only at the moment a summary is generated | United States | API inputs and outputs are not used for training; retained for up to 30 days for abuse monitoring per the OpenAI API data policy, then deleted (DPA executed) |
| Resend | Transactional email | Email address, sign-in links, service notices | United States | Per the Resend privacy policy |
| Paddle | Payments (merchant of record) | Payment and billing data — never health data | Per the Paddle policy | Per the Paddle privacy policy |
Your health data is never sent to any provider not listed on this page.
Governing language
This document is written in Simplified Chinese and provided in English for convenience. In case of any discrepancy or conflict between language versions, the Simplified Chinese version prevails.