Resend + Specific stack + observability. 30-day controller notice per change, dispatch gated on step-up + reason, and the audit trail per vendor version. Mirrors arch §1.1.
All sub-processors in scope.
Processing tenant data today.
30-day controller notice in flight.
Signed and archived.
Resend, Inc. · Sending: eu-west-1 (Ireland) per sending domain. Account data + metadata + logs: USA under SCC.
Transactional + broadcast email delivery, bounce + unsubscribe webhooks. Native broadcast + audiences + RFC 8058 one-click unsubscribe.
Delivery
v2026.05
Sending: eu-west-1 (Ireland) per sending domain. Account data + metadata + logs: USA under SCC.
Vendor locked 2026-05-26 (replaces earlier Postmark default per architecture-tier-b.md §6). DPA + SCCs on file. 21 sub-processors all US-based — list at resend.com/legal/subprocessors.
No notice pending. Adding a sub-processor or changing scope opens a new 30-day window.
Dispatch and edits route through step-up. The dispatch cannot be cancelled once sent.