Hail PilotSubprocessors
Last updated: 20 May 2026
Hail Pilot engages the following third-party processors to deliver the Service. Each is bound by a data processing agreement and is reviewed for security posture before onboarding.
For merchants who have executed a Data Processing Agreement with Hail Pilot, additions or replacements on this list will be notified by email at least 30 days in advance, with a right to object on reasonable grounds.
| Subprocessor | Service | Region | Purpose | DPA |
|---|---|---|---|---|
| Railway | Application hosting (backend + worker + worker-beat) | Asia-Southeast 1 (Singapore) | Compute, container runtime, internal networking for the FastAPI backend and Celery workers. | Link |
| Vercel | Frontend hosting + edge network | Global edge (sin1 region pin) | Next.js application hosting, edge runtime for middleware and route handlers. | Link |
| Cloudflare | DNS, CDN, WAF, Workers AI | Global edge | DNS resolution, DDoS protection, edge caching, Bot Fight Mode, and Workers AI for SEA-LION model routing. | Link |
| Anthropic | Claude LLM API (Haiku, Sonnet) | United States | AI reply generation, verification stage of cascade routing, dispute defense drafting. | Link |
| OpenAI | GPT models + Moderation API + image generation | United States | Fallback LLM, content moderation gate on outbound buyer drafts, product image generation. | Link |
| Together AI | LLM inference + embeddings (e5) | United States | Embedding generation for knowledge chunks and memory items; LLM fallback. | Link |
| Alibaba Cloud Model Studio | Qwen LLM family | Asia-Pacific Southeast 1 (Singapore) | Primary LLM provider via LiteLLM proxy, including reply generation and content pipeline. | Link |
| Cloudflare Workers AI | SEA-LION model hosting | Global edge | Hosted SEA-LION v4 27B for buyer-intent classification in SEA languages. | Link |
| HitPay | Payment processing | Singapore | Subscription billing, card and GIRO processing, recurring-billing tokenisation. | Link |
| Langfuse Cloud | AI observability and tracing | United States (US cluster) | LLM trace storage, prompt visibility, token and cost tracking. PII is redacted before export. | Link |
| Qdrant Cloud | Vector database | United States (us-west-1) | Vector embeddings storage for retrieval-augmented generation (per-merchant collections). | Link |
| Telegram | Bot messaging | Global | Push notifications for disputes, deadlines, investigations, and operator alerts. Chat IDs opt-in. | Link |
| Resend | Transactional email | United States / European Union | Account verification, billing receipts, dispute and case notifications. | Link |
| Cloudflare R2 | Hot object storage | Global (replicated) | Evidence files (encrypted), product images, daily database backups (30-day retention). | Link |
| Backblaze B2 | Cold object storage | United States | Weekly + monthly cold backups (13-month retention). | Link |
| Sentry | Error monitoring + session replay | United States | Error reports, performance traces, 10% session replay with text masking and media blocking. | Link |
| Better Stack | Structured logging | United States | Application log aggregation and search for incident response. | Link |
| Cronitor | Cron job monitoring | United States | Health checks for Celery beat tasks (backups, sync jobs, sweeps). | Link |
| UptimeRobot | Uptime monitoring + SMS alerts | United States | Endpoint availability checks for production and staging plus SMS alerting. | Link |
Change notification
Subscribe to subprocessor changes by emailing legal@hailpilot.com with subject “Subscribe: subprocessor changelog.” Notices are also sent directly to the billing contact on file for merchants with a signed DPA.