Compliance
Sub-Processors & Data Flow
Last updated: May 26, 2026 · Reviewed by counsel
We use a small set of vetted vendors to deliver the registry. Each vendor processes only the data necessary for the function described below and has signed a Data Processing Agreement with us. This page is the canonical list — when we add or remove a sub-processor we update it here within 30 days.
| Vendor | Purpose | Data shared | Region | DPA |
|---|---|---|---|---|
| Stripe, Inc. | Card payments, subscriptions, marketplace escrow, KYC | Name, email, last 4 of card, billing address, payout bank info (breeders) | United States (with EU sub-processors per Stripe's DPA) | View |
| Resend (Resend Inc.) | Transactional email delivery (welcome, transfer invites, certificates) | Email address, recipient name, message contents | United States | View |
| MongoDB Atlas (MongoDB, Inc.) | Primary application database | All user-stored content (account, dogs, litters, transactions) | United States (configurable EU region available) | View |
| Emergent (Emergent Labs, Inc.) | Hosting, object storage, AI assist (LLM-generated content), Google sign-in | Account email/name, uploaded files (photos, certificates), generated text prompts | United States | View |
| Google LLC | OAuth single-sign-on (only when user chooses Google login) | Google account email, name, profile photo | United States | View |
| Daily.co (Pluot Inc.) | Live video tour rooms — short-lived audio/video calls between a buyer and a verified breeder ($35 video tour booking). | Buyer + seller display name, room access tokens; ephemeral audio/video stream during the 15-minute call. We do not record. Daily.co retains diagnostic logs per their DPA. | United States (with global edge network) | View |
| Cloudflare, Inc. | Turnstile bot/abuse protection on public forms (registration, login, password reset, contact-admin). | IP address, browser fingerprint hash, challenge token. No content from the form is shared. | United States + global edge | View |
| Anthropic PBC | AI text generation (Claude) for the admin marketing-pack generator and the kennel-bio assistant. Routed via Emergent LLM Key — we do not hold a direct contractual relationship with Anthropic; Emergent is the contracting processor, Anthropic is the sub-processor. | Prompts and the context required to answer them — aggregate platform statistics for the marketing generator (counts of kennels, dogs, breeds, completed transports), the user's kennel description for the bio assistant. Other users' personal data is never sent. Outputs are not retained by Anthropic for model training. | United States | View |
| Apple Push Notification Service | Delivers web push notifications (calendar reminders, transport status, escrow milestones) to Safari and iOS users who have opted in. | Push endpoint URL issued by APNs, public application key, encrypted payload (event title and link). Apple does not see decrypted payloads. Only used when the user has explicitly enabled push. | United States + global edge (per Apple) | View |
| Google Firebase Cloud Messaging (FCM) | Delivers web push notifications to Chrome, Edge, and Android browsers that have opted in. | FCM push endpoint, public application key, encrypted payload. Only used when the user has explicitly enabled push. | United States | View |
| Mozilla autopush | Delivers web push notifications to Firefox users who have opted in. | autopush endpoint, public application key, encrypted payload. Only used when the user has explicitly enabled push. | United States | View |
International transfers
We are based in the United States. EU/UK personal data is transferred to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) where applicable. Each sub-processor above maintains its own SCC framework as documented in their DPA.
Tax / financial flow
All buyer card payments are processed by Stripe. For marketplace purchases (one breeder selling a dog to a buyer), funds route through Stripe Connect Express — Stripe holds the funds in the seller's connected account, then settles them to the seller's bank. Armstrong K9 Registry never takes beneficial ownership of the buyer's payment for the dog. The seller remains the merchant of record for the sale and is responsible for sales tax, income tax, and 1099-K reporting in their jurisdiction. Stripe issues the 1099-K (where applicable) directly to the seller's Connect account; the Registry is not part of that filing.
Object to a new sub-processor
If you object to a new sub-processor, contact us at privacy@armstrongk9registry.com within 30 days of this page being updated. We will work in good faith to find an alternative; if none is feasible you may terminate your subscription and receive a pro-rated refund.