Trust Center / Privacy
Approved Subprocessors
These companies process personal data for us, all of it in the US after Cloudflare's nearest edge first handles each request. This list is Annex III of any data processing agreement we sign, including our own DPA.
| Subprocessor | Address | Purpose | Personal data |
|---|---|---|---|
| Cloudflare, Inc. | 101 Townsend St, San Francisco, CA 94107, USA | Hosting | Accounts and IP addresses |
| Fastmail Pty Ltd | Level 2, 114 William St, Melbourne VIC 3000, Australia | Email address and message of anyone who writes to us | |
| Hetzner Online GmbH | Industriestr. 25, 91710 Gunzenhausen, Germany | VM hosting (artifact analysis) | Uploads |
| InterServer, Inc. | 110 Meadowlands Pkwy, Secaucus, NJ 07094, USA | VM hosting (artifact analysis) | Uploads |
| IONOS SE | Elgendorfer Str. 57, 56410 Montabaur, Germany | VM hosting (artifact analysis) | Uploads |
| Stripe, Inc. | 354 Oyster Point Blvd, South San Francisco, CA 94080, USA | Payments | Billing name, email, address, and card |
Sign-in providers, such as GitHub and Google, sign your team in on your behalf, so they aren't our subprocessors.
We notify customers 30 days before adding one.