Working draft — no effective date
These services are represented in the codebase or architecture. A listing is not evidence that a provider is enabled, receives beta data, is under contract, has a DPA, or has passed security and retention review. Only separately evidenced core pilot providers may receive approved pilot data.
| Provider | Data | Purpose | Release status |
|---|---|---|---|
| Vercel | Application traffic and approved maintenance files | Hosting and private provider-managed file storage | Core provider; contract/DPA and controls require release evidence |
| Neon | Approved pilot application records | Managed Postgres | Core provider; contract/DPA, backup, and restore require release evidence |
| Anthropic (Claude) | Prompts and portfolio context you ask about | AI assistance | Receives the question you ask and the records used to answer it |
| RentCast | Property addresses you enter | Property enrichment | Receives addresses you look up |
| Plaid | Bank and transaction data | Financial sync | Receives the bank connection you authorize; read-only |
| Stripe | Payment data | Payments | Receives payments you route through it |
| Twilio | Phone numbers and message/call content | Messaging and voice | Permitted by this deployment but not configured; no credentials are set, so no data reaches this provider |
| Google / Microsoft | Connected-mailbox content and picked Drive files | Email sync and file import | Receives the mailbox or files you connect |
| Dropbox Sign | Documents sent for signature | E-signature | Receives documents you send for signature |
| Deepgram / Whisper | Call audio | Transcription | Receives call recordings you transcribe |
| Resend | Outbound transactional email | Email delivery | Delivers mail when no personal mailbox is connected |
API keys alone do not authorize a provider. Each activation requires scope, contract/DPA, security, data-flow, retention, monitoring, rollback, and release approval evidence.