Subprocessors
Last updated: October 14, 2026
Third parties that may process personal data on behalf of AACFlow customers under the Data Processing Addendum.
INTERNAL WARNING (not for production): this legal page still contains owner placeholders or test data (highlighted [[TO BE FILLED: ...]] markers or test company data). It must not go live in this state. Run `bun run scripts/check-legal-placeholders.ts` to list them.
This register is derived from the product's code and deployment. Entries marked "to be confirmed" are pending verification by the operator. Customers can subscribe to change notices by writing to legal@aacflow.io; we give at least 30 days' notice of new subprocessors (see DPA, section 7).
1. Core infrastructure and service providers
| Subprocessor | Purpose | Location / transfer mechanism | Status |
|---|---|---|---|
| Hosting / own server (Hetzner or similar) [[TO BE FILLED: provider legal entity and data-centre location]] | Application hosting, database, file storage | EU (Germany/Finland) - to be confirmed | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| Cloudflare, Inc. / Cloudflare Turnstile | DNS/CDN/bot protection (Turnstile on sign-up) if configured | Global / USA (SCCs, DPF) | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Card payments and subscriptions (customers outside Russia) | EU / USA (SCCs, DPF) | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| Bank Tochka (Точка Банк) | Payments from Russian customers (SBP/cards) | Russian Federation | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| Robokassa | Payments from Russian customers | Russian Federation | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| E-mail delivery provider (Resend / Amazon SES / Azure Communication Services / own SMTP) [[TO BE FILLED: which one is configured]] | Transactional e-mail (sign-in codes, invitations, receipts) | USA / EU - to be confirmed | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| PostHog (PostHog, Inc.; via /ingest proxy) | Product analytics (consent-based; marketing/measurement categories) | USA (us.i.posthog.com; SCCs/DPF) | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| Google LLC (Google Analytics / Ads tag) | Web analytics and conversion measurement on the marketing site (consent-based) | USA (SCCs/DPF) | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
| Grafana / OpenTelemetry endpoint (operational telemetry) | Service metrics, traces and error telemetry (no customer content intended) | To be confirmed | Integration present in code; [[TO BE FILLED: Owner - confirm if used in production]] |
2. Customer-selected model and tool providers
The following are used only when you pick the corresponding model, tool or integration in a workflow. Their processing is part of your instruction as controller.
| Subprocessor | Purpose | Location / transfer mechanism | Status |
|---|---|---|---|
| OpenAI | LLM inference (prompts and outputs) | USA (SCCs/DPF) | Integration present in code; Only if you enable/choose it (customer-selected) |
| Anthropic | LLM inference (prompts and outputs) | USA (SCCs/DPF) | Integration present in code; Only if you enable/choose it (customer-selected) |
| OpenRouter | LLM routing to many model vendors | USA | Integration present in code; Only if you enable/choose it (customer-selected) |
| Google (Gemini / Vertex AI), Mistral AI, xAI, Cohere, Together, Fireworks, Baseten, Azure OpenAI / Azure Anthropic, Z.ai, Kimi | Further LLM / embedding / OCR providers selectable as models | USA / EU / other - per provider | Integration present in code; Only if you enable/choose it (customer-selected) |
| Exa, Firecrawl, Serper, Browserbase, E2B, Daytona, ElevenLabs, AgentMail and other tool/integration vendors | Search, scraping, code sandboxes, voice and mail tools used by workflow blocks you add | Per vendor | Integration present in code; Only if you enable/choose it (customer-selected) |
| Customer-connected third parties (Google Workspace, Slack, GitHub, Atlassian, etc.) | Data flows only to services that you connect via OAuth/API key; these are your own processors, not ours | Per service | Integration present in code; Only if you enable/choose it (customer-selected) |
