EZClaim engages a small number of sub-processors to provide hosting, email, and optional AI features. The table below lists every sub-processor that may handle workspace data, the purpose of the engagement, the categories of data accessed, the region(s) where processing occurs, and the contractual status.
| Sub-processor | Purpose | Data accessed | Region | Status |
|---|---|---|---|---|
| Posh VPS (Hostinger / 5.223.79.50) | Application + database hosting (Postgres, Redis, MinIO when active) | All case data at rest (encrypted column-level for NRIC, contacts, addresses) | Asia-Pacific (Bangladesh) | Self-hosted infrastructure provider; data-residency migration to MY-resident hosting (AWS ap-southeast-5 KL or local provider) tracked as Sprint 9 |
| Cloud AI provider (US) | Section 10 conclusion drafter, damage-from-photo description, cross-section coherence check, BM↔EN translation | Section narratives + photo bytes (1600px web variant) | United States | Opt-in per workspace via Settings; no calls happen without explicit configuration |
| Cloudflare | DNS + CDN/edge cache + TLS termination | Request metadata (IP, URL, user-agent); does not see decrypted application data | Global anycast | Cloudflare data-processing agreement covers SaaS sub-processing |
| Resend (planned, Phase 7+) | Transactional email delivery (invitations, notifications) | Recipient email + body (no case content) | United States / European Union | Not yet integrated — currently log-stub only; will be disclosed before activation |
| Better-Auth (self-hosted library) | Authentication framework — sessions, MFA, organisation/membership | None — runs in-process against the application database | N/A — library only | Open-source dependency; no data leaves the platform |
| Helsinki-NLP OPUS-MT (in-process) | Bahasa Malaysia ↔ English translation for police-report narratives | Police narrative text (held in-process) | N/A — runs locally on the platform server | MIT-licensed model; no external API calls |
| Tesseract.js (in-process, WASM) | OCR fallback for scanned PDFs and uploaded images | PDF and image bytes (held in-process) | N/A — runs locally on the platform server | Apache-licensed; no external API calls |
| Per-firm SMTP relay (tenant-controlled) | Email delivery via the firm's own provider (Gmail, Zoho, AWS SES, Resend SMTP, etc.) | Tenant-controlled — EZClaim only forwards messages the firm has chosen to send | Tenant-controlled | N/A — credentials owned by the firm and encrypted at rest in IntegrationConfig |
Notification of changes
Adding a new sub-processor that processes case data triggers a 30-day advance notice to every firm’s MANAGEMENT contact via in-app notification + email. Firms have the right to object — objections lift the notice period requirement to 60 days while alternatives are evaluated.
Questions
Direct enquiries about sub-processors, data residency, or DPA flow-down terms to dev@aifactory.fyi.