| Supabase (Postgres + Storage + Auth) | Primary database, file storage, authentication | All account and training data | Canada (Central) — ca-central-1 |
| Vercel | Application hosting + edge network | Request metadata, logs | Global edge; primary US |
| Groq (Llama 3.3 70B) | AI brief, dictation refinement, debrief parsing, PHI preflight, feed drafts | De-identified free-text you submit to AI features (regex-scrubbed server-side before transmission). Groq's commercial terms forbid using inputs/outputs for model training. | US |
| Anthropic (Claude) — optional fallback | AI features when Groq is unavailable | Same as Groq. Anthropic's API commercial terms forbid training on API inputs. | US |
| OpenAI (Whisper) | Speech-to-text for voice logging | Audio clips you record | US |
| Stripe | Payment processing for Pro subscriptions | Email, billing address, payment card data (held by Stripe, not Hippo) | Global |
| Resend | Transactional email (attending sign-off links, password resets) | Email addresses, email bodies | US |