Sub-processors
Last updated: June 2026
FlexOrch engages the following third-party sub-processors to support the delivery of its services. All sub-processors are subject to data processing agreements providing a level of protection substantially equivalent to our Data Processing Agreement.
Where personal data is transferred to sub-processors located outside the European Economic Area or Türkiye, appropriate transfer safeguards are in place, including Standard Contractual Clauses (SCCs) as applicable.
Current Sub-processors
| Provider | Purpose | Location | Data processed |
|---|---|---|---|
| Hetzner Online GmbH | Hosting & infrastructure | Germany (EU) | All application data, processed documents, databases, backups |
| Resend | Transactional email | United States (SCCs apply) | Email address, notification metadata |
| Lemon Squeezy | Payment processing & subscription management | United States (SCCs apply) | Billing data, subscription information |
| Cloudflare | CDN, DNS, Turnstile spam protection | United States / EU (SCCs apply) | IP addresses, request metadata |
Changes to Sub-processors
FlexOrch will update this page when sub-processors are added, replaced or removed. Customers who have executed a Data Processing Agreement with FlexOrch may object to new sub-processors on reasonable data protection grounds by contacting [email protected].
Self-hosted Components
The following components run on FlexOrch's own infrastructure (Hetzner, Germany) and are therefore not separate sub-processors:
- Ollama — local AI model runtime (runs on FlexOrch servers, no external API calls for local engine jobs)
- Umami — privacy-friendly analytics (self-hosted, no data sent to third parties)
- PostgreSQL — primary database