.svg){kind=logo}
Legal
These are the service providers that process personal data on Subflare's behalf. This page is the live list referred to in our Data Processing Agreement (Section 7) and Privacy Policy, and we keep it up to date.
| Sub-processor | Purpose | Data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services | Cloud hosting, databases, storage, backups and logs. Global content delivery network for the tracker script | All platform data | EU, Frankfurt (eu-central-1). Script delivery via global edge locations, no data stored there | Data stored in the EEA |
| OpenAI | AI intent scoring of form submissions | Website context, up to 100 recent visitor events, submitted form values (sensitive fields masked) | United States | SCCs |
| Stripe | Payments and subscription billing | Customer billing contacts and payment data | United States / EU | DPF · SCCs |
| Close | CRM for Subflare's own sales and customer records | Customer and prospect contact details, lead data passed from the dashboard | United States | DPF · SCCs |
| Zapier | Connects Subflare's dashboard data to our CRM | Lead and contact data passed between systems | United States | DPF · SCCs |
| Apollo.io Until Nov 2026 | Contact enrichment and email sequences for Subflare's own sales outreach | Business contact details of prospects | United States | DPF · SCCs |
| Slack | Internal team notifications about strong leads and closed deals | Details of Subflare's own prospects and customers | United States | DPF |
| Webflow | Hosting of the subflare.ai website and its forms | Website form submissions | United States | DPF · SCCs |
| Google Analytics 4 | Analytics for subflare.ai, only after consent | Pseudonymous usage data of subflare.ai visitors | United States | DPF |
Key: DPF = EU-U.S. Data Privacy Framework. SCCs = Standard Contractual Clauses (European Commission Decision (EU) 2021/914).
Not every customer's data passes through every provider listed.
If you are a customer and object to a sub-processor on reasonable data protection grounds, email privacy@subflare.ai. We will work with you to resolve it, and if we cannot, you may end the affected services as set out in our DPA.
