The following table lists all third-party service providers (subprocessors) currently engaged by Monarkh LLC to deliver the Monarkh Suite. This page is updated when subprocessors are added, removed, or when DPA status changes.
Active Subprocessors
| Provider | Purpose | Data Shared | Region | DPA Status |
|---|---|---|---|---|
| Google AI Studio (Gemini API) | LLM processing — PII stripping fallback (Stage 0.01), content extraction, child-friendly summaries | Pseudonymized email text (post on-device PII filter) | US (default endpoint) | Not executed. Consumer API terms apply. Migration to Vertex AI Enterprise (EU endpoint) in progress. |
| Google Vertex AI (planned) | Enterprise LLM processing — replacing AI Studio | Same as above | europe-west4 (Netherlands) | In progress. GCP project provisioned, service account created, ADC auth configured. DPA available via Google Cloud Console. |
| Supabase | PostgreSQL database hosting — user accounts, enriched emails, Q&A data, calendar events | Pseudonymized school communication data, user account metadata | ap-northeast-1 (AWS Tokyo, Supabase-managed) | Not executed. Available on Pro plan via Supabase dashboard. |
| Render | Application hosting — 5 services (API gateway, email pipeline, query orchestrator, document processor, AI assistant) | Application code, runtime environment variables, application logs (7-day retention) | Frankfurt (eu-central) | Not executed. Available on Team plan via Render support. |
| Qdrant Cloud | Vector database — semantic search embeddings for school communications | Vector embeddings of pseudonymized school content, metadata tags (bond IDs, student IDs) | europe-west3 (GCP Netherlands) | Not executed. DPA request pending via Qdrant support. |
| Cloudflare | Edge network — DNS, CDN, WAF, DDoS protection for monarkh.net and monarkh.ae | HTTP request metadata (IP addresses, request headers). No application data. | Global edge network | Not executed. Standard DPA available at cloudflare.com/dpa. |
| Resend | Transactional email — account verification, password reset | User email addresses, email subject lines | US | Not executed. DPA template request pending. |
Self-Hosted Components
The following components run on Monarkh-managed infrastructure (Render containers) and are not third-party subprocessors:
- Ollama — open-source LLM runtime for local model inference (quality assurance, fallback processing). No data leaves Monarkh infrastructure.
Previously Listed (No Longer Active)
The following providers were previously listed in our privacy policy but are not currently integrated into the Monarkh Suite:
- Twilio — not integrated
- SendGrid — not integrated
- Stripe — not integrated
- Amazon Web Services (direct) — Supabase runs on AWS infrastructure, but Monarkh does not have a direct AWS relationship
- OpenAI — not currently used in production pipeline
- Anthropic — not currently used in production pipeline