Sub-processors
Last updated 16 August 2026
FirmoryX uses the third parties below to help deliver the service. Each processes customer data only on our behalf and under a data-processing agreement. Email is self-hosted, so no third-party email processor is used.
| Sub-processor | Purpose | Data handled | Location |
|---|---|---|---|
| Neon, Inc. | Managed PostgreSQL database & authentication | Account credentials; all application data (clients, devices, vulnerability matches, report metadata) | United States |
| Vercel, Inc. | Application hosting & content delivery | Request metadata; IP addresses (transient); application traffic | United States / global edge |
| Cloudflare, Inc. | Object storage for generated evidence PDFs; network delivery | Generated compliance report PDFs | European Union (EU-jurisdiction storage) |
| Stripe, Inc. | Payment & subscription processing | Billing contact and subscription metadata (card data is handled by Stripe and never reaches FirmoryX) | United States / Ireland |
Transfers to sub-processors outside the EU/EEA are protected by Standard Contractual Clauses or an equivalent safeguard. Questions: privacy@firmoryx.se.