Security & Trust
Sub-processors
A sub-processor is a company we engage to process personal data on our customers' behalf. This page lists each one, what it does for Flowtly, where it processes the data and when it was added to the list.
| Sub-processor | Role | Processing location | Added to the list |
|---|---|---|---|
| Google Cloud (Google Ireland Limited) | Platform hosting and cloud infrastructure | EU (europe-west1, Belgium) | |
| Stripe | Payment processing | EU / outside the EEA, depending on the operation | |
| Kontomatik | Bank data integration | Poland (EU) | |
| Functional Software, Inc. (Sentry) | System error monitoring | United States | |
| Anthropic, PBC | Processing of document content for AI-based features (document analysis, assistant) | United States | |
| Postmark (ActiveCampaign, Inc.) | Sending transactional email (invoices, reminders, notifications) | United States | |
| AWS CloudFront | Static-asset delivery | Not stated yet |
How changes are announced
Section 9 of our data processing agreement sets the rule: we notify customers at least 30 days before adding or replacing a sub-processor, and they can object within 30 days. The agreement carries the list as of its own publication date, and the current list is also available on request.
Read the data processing agreementChange log
AWS CloudFront, used for static-asset delivery, added to the published list, and the list published on this page.
List first published, in section 9 of the data processing agreement, with six sub-processors.