# TwentyCore Subprocessors and Data Residency Note

Last reviewed: 2026-05-17

Exact subprocessors and regions can vary by deployment. This note describes provider categories and review questions buyers should confirm before production.

## Provider Categories

- Cloud host and managed database.
- Object storage for attachments.
- Frontend hosting.
- Stripe for subscription checkout, billing portal, and webhooks.
- Email provider for transactional and demo/contact notifications.
- LHDN MyInvois where e-Invoice submission is enabled.
- AI provider where AI assistance is enabled.
- Monitoring and logging provider.

## Data Residency Review

Before go-live, confirm:

- Database region.
- Object storage region.
- Backup region.
- Frontend hosting region.
- Email and AI provider processing locations.
- Whether any customer data leaves the primary hosting region.

## Buyer Evidence To Request

- Final provider list.
- Provider purpose and data role.
- Region and retention notes.
- DPA or enterprise terms where required.
- Data export and deletion process.