Legal

Subprocessors

Last updated August 31, 2026

These providers process customer data on our instructions when you use MoveIt:

Vercel — hosts the web app and may process request logs / optional Analytics.
Railway — hosts the API and PostgreSQL database.
Cloudflare — R2 object storage for photos, audio, and documents (signed URL access).
Google — OAuth identity (email, name, avatar). We do not load Google Fonts from Google in the product; fonts are self-hosted.
OpenAI (or a configured OpenAI-compatible host) — vision and transcription when cloud AI is on.
Stripe — payments, invoices, and tax calculation. Card data stays with Stripe.
Resend or Postmark — transactional email (invites, deletion, export) when configured.
Sentry — error monitoring, if a DSN is configured, with PII scrubbing.

A local AI worker (Ollama / Whisper on a machine you run) processes media only if you attach one. That machine is under your control, not ours.

These pages are written to match the product as shipped. They are not a substitute for advice from your own counsel. Request a review before you rely on them as a filed contract or DPA.