Subprocessors
Last updated: 9 October 2026
These are the only third parties that process customer data on our behalf. We email account owners at least 30 days before adding a new one, so you have time to object.
- Cloudflare, Inc.
- Purpose
- Hosting, compute, databases, transactional email and DDoS protection
- Data
- All service data: accounts, fleet inventory and integration credentials (encrypted)
- Location
- Databases in the EU; requests served from Cloudflare's global network
- PostHog, Inc.
- Purpose
- Product analytics and session recordings
- Data
- Usage data and account details, with sensitive fields masked
- Location
- EU (PostHog Cloud EU)
How we use this data is set out in our Privacy Policy, and the controls around it on our security page.