Legal Centre
Subprocessor Register
Effective date: 2 March 2026
This register lists the default third-party services used to deliver Apworth in production. It is updated when a new material subprocessor is added.
1. Core Service Providers
- Google Cloud / Firebase: authentication, database, object storage, and audit logs. Database records are held in australia-southeast1 (Sydney, Australia). Uploaded files, including documents, photos, and certificates, are currently held in us-west1 (United States).
- Vercel (United States): application hosting, request handling, and deployment infrastructure for web requests, response metadata, and rendered application content.
- Anthropic (United States): processes messages sent to Ask together with the on-screen context needed to answer them, which can include resident and staff names, events, rosters, and menus. Used only where a home has Ask enabled.
- Sentry (United States): error monitoring and incident investigation for technical diagnostics and error metadata when monitoring is enabled.
2. Optional Services
- Google Analytics (United States) may be used for public-site product analytics only when a user explicitly consents.
- Resend (United States) may be used for transactional family inactivity nudges when a customer enables that workflow.
3. Commitments
- Apworth does not sell customer data.
- Several subprocessors are located in the United States, so some personal information is processed overseas. Apworth takes reasonable steps to ensure those recipients handle it consistently with the Australian Privacy Principles.
- Content sourced from Project Gutenberg is not used to process customer personal information.
- Customers are told before a new material data-processing subprocessor is added.