Service health
API and ingest expose /health, /readyz, and /metrics endpoints for runtime checks and alerting hooks.
Privacy & control
Trust is a feature—not an afterthought.
Consent-aware defaults, masking controls, and a lightweight script designed to respect your customers and your site.
Consent-aware by default
Support strict modes and honor common browser and platform consent signals.
Masking & redaction controls
Redact sensitive values and mask fields before data leaves the browser.
Customer controls
Choose what to collect, disable features, and keep data aligned to your needs.
Performance-first
Async loading and batching designed to keep your site fast and stable.
Built for governance
Clear settings and guardrails so teams can scale responsibly.
Operational posture
Public uptime guarantees are not yet published. We currently run health/readiness probes and reliability telemetry on API, ingest, queues, and integration delivery paths.
Observability
Structured logs, queue metrics, and error telemetry are used to track ingest, processing, and integration delivery reliability.
Incident workflow
Security and reliability incidents are triaged with audit trails, deployment history, and recovery runbooks in the monorepo docs.
Compliance evidence pack
These artifacts reflect the current implementation and deployment controls in the monorepo.
- Architecture
Runtime surfaces, data flow, and tenancy model.
- Privacy and consent
Consent model, DSAR controls, and regional handling.
- Integrations
Destination setup, auth methods, and reliability scorecards.
- Environment + secrets
Secret Manager flow, key handling, and CI guardrails.
- Database schema
Core entities, audit surfaces, and retention-sensitive tables.
Core subprocessors
The list below covers platform subprocessors currently used by ProsPix. Customer-configured destination connectors may add provider-specific processors based on your integrations.
| Provider | Purpose | Data categories |
|---|---|---|
| Google Cloud | Application hosting, databases, queue/cache services | Application and event data |
| Cloudflare | Edge access control and DNS proxying | Request metadata and access events |
| Stripe | Billing and subscription management | Billing profile and payment metadata |
| Sentry | Error monitoring and diagnostics | Operational error traces and diagnostic metadata |
| Firebase | Authentication and identity services | Authentication identifiers and session metadata |