{"record":{"v":1,"type":"mirror.residency","at":"2026-11-06T09:27:38.245Z","processing":{"platform":"cloudflare durable object","jurisdiction":"eu","evidence":"runtime","observed_colo":"FRA"},"storage":{"platform":"supabase postgres on aws","region":"eu-central-1 (Frankfurt)","jurisdiction":"eu","evidence":"declared"},"edge":{"colo":"CMH","body_read_at_edge":false,"note":"The Cloudflare data centre that first receives a request can be anywhere; it forwards the request to the processing location without reading the body. Pinning that hop needs Cloudflare Regional Services, which this rail does not use."},"commitment":"Processing and storage of everything this operator receives are in the EU jurisdiction; processing is enforced by the platform and observed at runtime.","not_covered":["the first edge hop (TLS termination and forwarding) can be outside the jurisdiction","Cloudflare logs a Durable Object id outside its jurisdiction for billing and debugging","storage residency is declared by the database project's region, not observed at runtime","a member's own systems, the bander and anything a member sends elsewhere"],"disclaimer":"The operator's signed statement of where it processes and stores what it receives. Processing is observed at runtime only where evidence says runtime; storage is declared. It is not an audit of the hosting providers, and it does not cover the first edge hop, which can be anywhere."},"proof":{"alg":"ES256","kid":"mir-d23d8e9fea11182c","signature":"MJbf1HAC-WZwpwzm6juj_k2gUilLDc4poqFj8J5ccd9QnB-IoTk6Yqgmkt31jE2pTgICvcZYJ9eTV6cViAqkuw","canonicalization":"recursively sorted keys","note":"ES256 over the record as canonical JSON (recursively sorted keys). Verify offline against the published JWKS by matching proof.kid; no database, no network."}}