1. Vercel
Purpose: Hosting, edge/network, deployment logs
Configured/declared region: United States / global
Active when: Application is deployed on Vercel.
Required for production: Yes
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
2. Neon
Purpose: Primary PostgreSQL database for projects, workspaces and account data
Configured/declared region: Configured production database region
Active when: Frame production uses the required pooled Neon PostgreSQL runtime.
Required for production: Yes
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
3. Clerk
Purpose: Authentication and user/session management
Configured/declared region: Configured authentication service region
Active when: Frame production uses Clerk for authentication and session management.
Required for production: Yes
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
4. Cloudflare R2
Purpose: Export artifact and asset object storage
Configured/declared region: Configured object-storage region
Active when: Frame production uses Cloudflare R2 for private assets and export artifacts.
Required for production: Yes
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
5. Cloudflare Workers / Durable Objects
Purpose: Paid real-time collaboration transport, conflict-resolution room coordination and durable Yjs room state
Configured/declared region: Configured Cloudflare deployment jurisdiction/region
Active when: A paid workspace enables simultaneous real-time editing.
Required for production: No / conditional
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
6. Upstash
Purpose: Distributed API rate-limit counters and abuse protection
Configured/declared region: Configured Redis service region
Active when: Frame production uses Upstash Redis REST for distributed rate limiting.
Required for production: Yes
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
7. Stripe
Purpose: Subscription checkout, billing portal and payment lifecycle
Configured/declared region: Configured billing account processing region
Active when: Paid plans and Stripe billing are enabled.
Required for production: No / conditional
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
8. Resend
Purpose: Transactional account, security and operational email delivery
Configured/declared region: Configured email service processing region
Active when: Transactional email delivery is configured through Resend.
Required for production: No / conditional
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
9. PostHog
Purpose: Optional consent-gated product analytics and telemetry
Configured/declared region: Configured analytics region
Active when: Optional product analytics are enabled with the required consent.
Required for production: No / conditional
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region
10. Sentry
Purpose: Error monitoring and production incident triage
Configured/declared region: Configured monitoring service region
Active when: Sentry error monitoring is enabled.
Required for production: No / conditional
First-use date: Not evidenced by the repository registry
Transfer mechanism: Operator/legal review required for the actual account and region