The infrastructure providers Passport relies on to run the hosted service. We keep this short and current on purpose.
| Provider | What it does | Location |
|---|---|---|
| Railway | Application hosting and the managed Postgres database that stores your workspace | United States |
| Cloudflare | DNS and CDN/proxy in front of the hosted app | United States (global edge) |
| Resend | Transactional email: sign-in links, invites, and request notifications | United States (us-east-1) |
| Stripe | Payments and subscription billing (we never see card numbers) | United States |
| GitHub | Desktop app release distribution (signed update feed) | United States |
Resend and Stripe only process data on deployments where an admin has turned on email or billing. Your workspace data itself lives with Railway; the others see only what their function needs.
A DPA is available on request during early access. See also Privacy and Security.