Sub-processors
Draft. This document describes what the product actually does, but a lawyer has not reviewed it yet. It must be read by one before commercial launch.
Who else touches the data, and why. The list is versioned, so a change is visible.
Hosting
Application servers and the database, inside the European Union.
Photos
Object storage for photos and their derivatives.
Invitations, reminders and account mail.
Analytics
Anonymous usage statistics, with no third-party trackers and no profiling.
Changes
Named providers and their locations go here before commercial launch; until then this page describes categories rather than companies.