Storage Providers and Sub-processors
Last updated: 8 October 2026 · To be notified of changes, email [email protected]
Storage providers
Coded fragments are distributed across multiple independent storage providers. As explained in our Privacy Policy, fragments held by an individual provider do not constitute personal data, and these providers are not sub-processors.
We use providers from the following groups:
- Global cloud platforms
- European cloud providers
- Developer cloud providers
- Specialist object-storage and edge providers
Which providers and locations hold your fragments depends on the locations you select. Region Select is available on every plan, including the free tier: you choose from the locations offered to you, and your fragments are stored only with providers in those locations. The named list of providers and the locations in use is available to customers on request at [email protected].
Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Fly.io | Gateway processing | Amsterdam (Netherlands), Frankfurt (Germany), Stockholm (Sweden), London (United Kingdom), Toronto (Canada), Ashburn, Chicago and Los Angeles (United States) |
| Google Cloud Platform | Control plane, key storage, logging and monitoring | Frankfurt, Germany |
| Cloudflare | Website hosting and DNS | Global network; processed nearest the visitor |
| Sentry | Error monitoring and session replay (gateways and web applications) | Frankfurt, Germany (Sentry's EU data region). Sentry is a US company, so its staff may access the data from the United States. |
| Mailgun | Service communications | EU region |
| InfluxData | Operational metrics | Frankfurt, Germany |
Google Cloud Platform and Cloudflare also act as storage providers, as described above.
We give 30 days' notice before adding or replacing a sub-processor.
Security and compliance information
Each sub-processor publishes its own certifications and audit reports. We rely on them and provide them to customers on request (see clause C.8 of the Data Processing Agreement).
| Sub-processor | Published information |
|---|---|
| Fly.io | Compliance: SOC 2 Type 2 audited; infrastructure in ISO 27001 data centres. SOC 2 report available from Fly.io. |
| Google Cloud Platform | Compliance resource center, including ISO/IEC 27001, SOC 2 and the Compliance Reports Manager |
| Cloudflare | Trust Hub: compliance resources. Compliance documents are available through Cloudflare's dashboard. |
| Sentry | Trust: SOC 2 Type 2 report and ISO 27001 certificate |
| InfluxData | Security: SOC 2 Type 2 and ISO 27001 |
| Mailgun | Mailgun security and compliance |