Subprocessors
Last updated: Mar 23, 2026
This page lists all third-party service providers (“Sub-processors”) engaged by Flowtag (the “Processor”) to support the delivery of the Flowtag analytics service. Each Sub-processor may process limited personal data on behalf of Flowtag customers (“Controllers”), as described in the Flowtag Data Processing Agreement (DPA).
Flowtag performs due diligence on all Sub-processors and ensures appropriate data protection safeguards are in place, including GDPR-compliant Data Processing Agreements and Standard Contractual Clauses (SCCs) where required.
The Controller provides a general authorization for the Processor to engage sub-processors necessary for the provision of the Service.
Current sub-processors include:
| Sub-processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Neon (Postgres) | Database storage | US (Ohio) | DPA + SCC |
| Upstash (Redis) | Cache | EU/US/AP/SA | DPA + SCC |
| Cloudflare | Edge compute, Workers, CDN, security, Storage | EU/Global | DPA + SCC |
| Vercel | Hosting of frontend / dashboard | US/Global | DPA + SCC |
| Resend | Transactional email (reports, alerts) | EU/US | DPA + SCC |
| Paddle | Billing and subscription management | EU/Global | DPA + SCC |
| PostHog | Product analytics and user feedback | US (Virginia) | DPA + SCC |
| Fly.io | Hosting of backend services | US/Global | DPA + SCC |
The Processor shall notify the Controller of intended changes to sub-processors. The Controller may object on reasonable grounds.