Sub-processors
Last updated:
This page forms part of our Privacy Policy. We share personal data, including data received from Google and Microsoft accounts that you connect, only with the service providers (“sub-processors”) below, which help us run the Services, under contracts that limit their use of it.
Current sub-processors
| Provider | Purpose | Location of processing |
|---|---|---|
| Fly.io | Application hosting | Singapore |
| Neon | Managed PostgreSQL database | Singapore (AWS ap-southeast-1) |
| Stripe | Payments, subscriptions and invoicing | United States and other Stripe locations |
| Cloudflare (Turnstile) | Bot and abuse protection at sign-up and sign-in | Global network |
| Resend (delivered through Amazon SES) | Sending account and service emails | United States (company); emails sent from AWS ap-northeast-1 (Tokyo) |
| Upstash | Short-lived caching, rate limiting and session support | Singapore (AWS ap-southeast-1) |
| AI model provider | Answering questions typed into AI assistant features. These features are not enabled today; we will name the provider here before enabling them. | Not applicable while disabled |
| Plausible Analytics | Cookie-less visit statistics on trefur.com | European Union |
Changes to this list
We will update this list before we add or replace a sub-processor that processes Customer Data. Customers with a signed data processing addendum receive the notice described in it. Questions: privacy@trefur.com.