[
  {
    "vendor": "Google LLC",
    "purpose": "Compute & object storage for elofyn.com",
    "dataCategory": "Server logs, encrypted database",
    "region": "us-central1 (Iowa, US)",
    "status": "Active"
  },
  {
    "vendor": "Google LLC",
    "purpose": "Analytics (GA4) — load-gated by consent",
    "dataCategory": "Pseudonymous event IDs",
    "region": "Global",
    "status": "Active"
  },
  {
    "vendor": "Cloudflare, Inc.",
    "purpose": "DNS, edge caching, DDoS protection",
    "dataCategory": "IP address, request metadata",
    "region": "Global",
    "status": "Planned · Phase D"
  },
  {
    "vendor": "Resend, Inc.",
    "purpose": "Transactional + contact-form email",
    "dataCategory": "Sender/recipient address, message body",
    "region": "EU/US",
    "status": "Planned · Phase D"
  },
  {
    "vendor": "Sentry GmbH",
    "purpose": "Error + performance telemetry",
    "dataCategory": "Request URL, stack trace, masked PII",
    "region": "EU (Frankfurt)",
    "status": "Planned · Phase D"
  },
  {
    "vendor": "Stripe Payments Europe Ltd.",
    "purpose": "Billing for Dev Snippets API",
    "dataCategory": "Email, payment method token",
    "region": "EU/US",
    "status": "Planned · Phase D"
  },
  {
    "vendor": "Upstash, Inc.",
    "purpose": "Edge rate-limit state (Redis)",
    "dataCategory": "IP-derived keys, counts only",
    "region": "EU (Frankfurt)",
    "status": "Planned · Phase D"
  }
]