Sub-processors
Flow80 uses the following third-party service providers (sub-processors) to deliver the platform. All processors are covered by GDPR Article 28 Data Processing Agreements. Flow80 remains the data controller; sub-processors act only on our instructions.
EU hosting provider
| Purpose | Cloud hosting — Flow80 application servers and databases |
| Location | EU / European hosted |
| Data processed | Customer data, workflow data, execution logs |
| Safeguards | GDPR Data Processing Agreement in place. |
Cloud compute provider
| Purpose | Additional compute and service integration |
| Location | EU / European hosted |
| Data processed | Usage telemetry, diagnostic data |
| Safeguards | GDPR Data Processing Agreement. EU Standard Contractual Clauses. |
Off-site backup storage provider
| Purpose | Off-site backup storage |
| Location | United States / EU (based on data residency) |
| Data processed | Database backups, file backups |
| Safeguards | GDPR Data Processing Agreement. |
Full sub-processor details: The list above describes each sub-processor by role and safeguard without naming the underlying hosting and infrastructure providers. A full, named list of our current sub-processors is provided to customers under the Data Processing Agreement, and is available on request. To request it, contact us at [email protected].
Your rights: As a data subject you have the right to request information about what data we hold about you, to request correction or deletion, and to object to processing. Contact us at [email protected].