Sub-processors

This is the current list of the third parties that process personal data on Flowzart's behalf, grouped by what they do for us. It is the list our Data Processing Addendum refers to; Schedule 3 there reproduces it, and section 9 sets out how changes are notified.

Flowzart Limited and Royal Technology Limited both operate the servers and the cluster the Service runs on, in the United Kingdom, Bulgaria, and Germany, and administer the platform. The one that is not your contracting party does so as an affiliate bound by the DPA.

Servers & network

• Contabo GmbH (Germany): rents us the virtual servers part of Flowzart runs on.
• IONOS SE (Germany): rents us the virtual servers part of Flowzart runs on.
• Cloudflare, Inc. (United States): every request to flowzart.com and the Service passes through Cloudflare's network before it reaches us; that is how it blocks attacks, and it also hosts this website.
• Tailscale Inc. (Canada / United States): the private network our servers use to reach each other and that we use to administer them. When two servers cannot connect directly, Tailscale's relay servers pass the traffic along; it stays encrypted, and Tailscale cannot read it.

Payments

• Stripe Payments Europe Ltd (Ireland): handles payments, subscriptions and PAYG pack purchases. Stripe receives your email address, billing name and a masked payment method.

Email & notifications

• Twilio Inc. (United States): runs SendGrid, which sends the waitlist emails and forwards contact-form messages to our mailboxes.
• Slack Technologies LLC (United States): our internal chat, where waitlist signups and contact and enterprise form submissions are mirrored so none is lost if email delivery fails.

Customer records

• HubSpot, Inc. (United States): our customer records. Waitlist and enterprise form submissions become a contact there, with a note of what the form said.

AI assistant

• Anthropic, PBC (United States): runs the Claude models behind the Conductor, Flowzart's AI assistant. What you write to the Conductor, and the workflow the chat is about, goes to Anthropic to produce the reply.

Error monitoring

• Functional Software, Inc. (United States): runs Sentry, which collects the Service's error and slowness reports, stored in Sentry's EU region in Germany. An error report can include a user ID or the address of the request that failed.

Website analytics

• PostHog, Inc. (United States): measures how this website is used and records errors on it. The data is stored on PostHog's EU servers in Frankfurt, Germany.

Vendors outside the EU and EEA are engaged under the Standard Contractual Clauses referenced in the DPA.

Questions about sub-processors go to [email protected].