Optional services remain visible and controllable.

• Managed AI: MCVM Care+ is planned to include Managed AI under annual fair use. Managed AI availability is confirmed when commercial purchasing opens.
• Your own AI key (OpenAI, BYOK): separately, a museum can connect its own OpenAI API account and pay that provider directly.
• Netlify: customer-controlled optional publication of reviewed public files. Private Research History is not included.
• Cloudflare and GitHub: signed update discovery; downloads and installation require user action. MCVM never updates itself: the only update method is for a person to open Settings > Program & Maintenance > Update App and start the update, and nothing installs automatically.
• Cloudflare Workers: static product website and planned service gateways; no MCVM analytics script or marketing pixel is installed on the product website.
• Cloudflare Email Routing and Gmail: current inbound evaluation and business correspondence; sensitive support or collection files are prohibited until an approved secure method exists.
• Staff Stations: only when a Staff Station is set up, the museum’s computer contacts Let’s Encrypt for certificates, and MCVM publishes a random hostname under staff.mcvmcollectionmanager.com through Cloudflare DNS.
• Paddle: selected for commercial checkout, billing, and merchant-of-record services; production configuration and qualification remain incomplete and checkout is closed.

The final approved Privacy and Data Handling Disclosure and Third-Party Services Disclosure supplied before purchase will control the detailed provider description.