# Subprocessors

Updated on January 23, 2024. [All policies](https://reflag.com/legal).

Reflag uses third party subprocessors, such as cloud computing providers and customer support software, to provide our services. We enter into GDPR-compliant data processing agreements with each subprocessor, extending GDPR safeguards everywhere personal data is processed.

Subprocessors are split into two groups:

- Subprocessors used for data about you (our customer), which Reflag in GDPR terminology is the controller of.
- Subprocessors used for data about your own customers/users, which Reflag in GDPR terminology is the processor of, and you are the controller of.

## Our customers' data [#](https://reflag.com/legal/subprocessors#Our-customers-data)

Reflag is the _controller_ of data about you (our customer). This does not include data about your customers/users.

- [Google](https://google.com/). Account authentication. US.
- [Google Analytics](https://google.com/). Account authentication. US.
- [Confluent](https://www.confluent.io/). Streaming service. EU.
- [Heroku](https://heroku.com/). Server hosting. EU.
- [Heroku Postgres](https://heroku.com/). Database hosting. EU.
- [Datadog](https://www.datadog.com/). Performance monitoring. EU.
- [Mixpanel](https://www.mixpanel.com/). Product analytics. EU.
- [Hubspot](https://www.hubspot.com/). CRM. EU.
- [Stripe](https://stripe.com/). Payment processing and management. US.
- [Segment](https://segment.com/). We send data through Segment to various subprocessors. US.
- [Slack](https://www.slack.com/). Internal and external communication. US.
- [Bytescale](https://www.bytescale.com/). Static image hosting. US.
- [Loom](https://www.loom.com/). Video sharing. US.
- [Webflow](https://www.webflow.com/). Web hosting. US.

## Our customers' users' data [#](https://reflag.com/legal/subprocessors#our-customers-users-data)

We are a _processor_ of data about your users/customers. We do not share or sell this data with any other providers. We only store it in our data center hosted with Amazon Web Services in the EU.

- [Confluent](https://confluent.io/). Kafka queuing. EU.
- [Ably](https://ably.com/). Real-time queuing (IP address only). EU.
- [Altinity](https://altinity.com/). Clickhouse database. EU.

This policy has been adapted from the [Basecamp open-source policies](https://github.com/basecamp/policies).