Sub-processors
These are the third parties that process personal data on FrootAI's behalf to deliver the service. We give customers at least 30 days' notice before adding a new sub-processor, per our DPA §6.
Last updated: 2026-06-21
| Vendor | Purpose | Data processed | Region | EU residency | DPA |
|---|---|---|---|---|---|
| Cloudflare | Hosting, CDN, edge compute, D1/R2/KV storage, Zero Trust admin access. | Request metadata, IP addresses, stored application data (D1/R2/KV). | Global (EU jurisdiction available) | Yes | DPA |
| Clerk | User authentication, sessions, and organization management. | Email, name, IdP subject id, org membership, session metadata. | US / EU | Yes | DPA |
| Plausible Analytics | Cookieless, privacy-first web analytics. | Aggregate page views, referrers, low-cardinality event tags (no PII). | EU (Germany / Netherlands) | Yes | DPA |
| Postmark | Transactional email delivery (sign-up, billing, security notices). | Recipient email address, message content. | US | — | DPA |
| Stripe | Payments, subscriptions, and invoice billing. | Billing contact email + name, payment metadata (card data tokenized by Stripe). | EU / US | — | DPA |
| WorkOS | Enterprise SAML SSO + SCIM directory-sync federation broker. | Email, name, IdP subject id, directory group membership. | US / EU | Yes | DPA |
Cloudflare
EU residencyHosting, CDN, edge compute, D1/R2/KV storage, Zero Trust admin access.
- Data:
- Request metadata, IP addresses, stored application data (D1/R2/KV).
- Region:
- Global (EU jurisdiction available)
Clerk
EU residencyUser authentication, sessions, and organization management.
- Data:
- Email, name, IdP subject id, org membership, session metadata.
- Region:
- US / EU
Plausible Analytics
EU residencyCookieless, privacy-first web analytics.
- Data:
- Aggregate page views, referrers, low-cardinality event tags (no PII).
- Region:
- EU (Germany / Netherlands)
Postmark
Transactional email delivery (sign-up, billing, security notices).
- Data:
- Recipient email address, message content.
- Region:
- US
Stripe
Payments, subscriptions, and invoice billing.
- Data:
- Billing contact email + name, payment metadata (card data tokenized by Stripe).
- Region:
- EU / US
WorkOS
EU residencyEnterprise SAML SSO + SCIM directory-sync federation broker.
- Data:
- Email, name, IdP subject id, directory group membership.
- Region:
- US / EU