Art. 28 DPA skeleton (CA-25). Not signed. Processor list below is the intended set; SCCs attach at signature.
Intended subprocessors (names only, no live account proof): database host, edge/DNS/object store, compute, Redis, notification rail, error reporter, PAL inspection provider (when signalled).
SafeUs stores refs and hashes, not raw provider payloads. Audit unavailable ⇒ no data release.