Subprocessor List
Last Updated: February 18, 2026
This document lists third-party subprocessors used by FlowSynk to provide the Services.
1. Infrastructure and Core Services
| Provider | Purpose | Data Categories | Region Notes |
|---|---|---|---|
| Convex | Backend database, serverless functions, data sync | Account data, workspace content, automation data, logs | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
| Clerk | Authentication and user/session management | Identity, login/session metadata | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
Vercel |
Web hosting and edge delivery | IP address, request metadata, telemetry | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
2. Billing and Finance
| Provider | Purpose | Data Categories | Region Notes |
|---|---|---|---|
| Polar | Merchant of record, checkout, subscriptions, invoicing | Billing identity, subscription status, transaction metadata | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
3. Communications and Scheduling
| Provider | Purpose | Data Categories | Region Notes |
|---|---|---|---|
| Calendly | Demo scheduling embeds and booking flow | Contact details, scheduling metadata | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
| AWS SES and/or Resend | Transactional and support email delivery | Recipient email, email content metadata | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
4. AI and Content Processing
| Provider | Purpose | Data Categories | Region Notes |
|---|---|---|---|
| OpenAI and related model providers | AI generation and transformation | Prompts, context, generated outputs, usage metadata | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
Backblaze B2 and internal media processors |
Optional media transforms/transcoding | Uploaded media, derivative files, job metadata | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
5. Security and Monitoring
| Provider | Purpose | Data Categories | Region Notes |
|---|---|---|---|
Sentry |
Error tracking and service reliability | Error events, system logs, limited user metadata | Primarily US-hosted infrastructure; cross-border transfers may occur under contractual safeguards, including SCCs where required. |
6. Update Process
FlowSynk may update this list as subprocessors change. For material subprocessor changes affecting Customer Data processing, FlowSynk will provide notice through reasonable channels.