[{"data":1,"prerenderedAt":435},["ShallowReactive",2],{"content:page:/pages/legal/sub-processors":3,"markdown-page-nav:none":434},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"cta":6,"body":10,"_type":428,"_id":429,"_source":430,"_file":431,"_stem":432,"_extension":433},"/pages/legal/sub-processors","legal",false,"","Storage Providers and Sub-processors","The storage provider groups IronShard distributes coded fragments across, and the sub-processors that process personal data, with purposes, locations, and compliance information.",{"type":11,"children":12,"toc":422},"root",[13,21,34,41,46,51,76,87,93,233,238,243,249,264],{"type":14,"tag":15,"props":16,"children":18},"element","h1",{"id":17},"storage-providers-and-sub-processors",[19],{"type":20,"value":8},"text",{"type":14,"tag":22,"props":23,"children":24},"p",{},[25,27],{"type":20,"value":26},"Last updated: 8 October 2026 · To be notified of changes, email ",{"type":14,"tag":28,"props":29,"children":31},"a",{"href":30},"mailto:contact@ironshard.ai",[32],{"type":20,"value":33},"contact@ironshard.ai",{"type":14,"tag":35,"props":36,"children":38},"h2",{"id":37},"storage-providers",[39],{"type":20,"value":40},"Storage providers",{"type":14,"tag":22,"props":42,"children":43},{},[44],{"type":20,"value":45},"Coded fragments are distributed across multiple independent storage providers. As explained in our Privacy Policy, fragments held by an individual provider do not constitute personal data, and these providers are not sub-processors.",{"type":14,"tag":22,"props":47,"children":48},{},[49],{"type":20,"value":50},"We use providers from the following groups:",{"type":14,"tag":52,"props":53,"children":54},"ul",{},[55,61,66,71],{"type":14,"tag":56,"props":57,"children":58},"li",{},[59],{"type":20,"value":60},"Global cloud platforms",{"type":14,"tag":56,"props":62,"children":63},{},[64],{"type":20,"value":65},"European cloud providers",{"type":14,"tag":56,"props":67,"children":68},{},[69],{"type":20,"value":70},"Developer cloud providers",{"type":14,"tag":56,"props":72,"children":73},{},[74],{"type":20,"value":75},"Specialist object-storage and edge providers",{"type":14,"tag":22,"props":77,"children":78},{},[79,81,85],{"type":20,"value":80},"Which providers and locations hold your fragments depends on the locations you select. Region Select is available on every plan, including the free tier: you choose from the locations offered to you, and your fragments are stored only with providers in those locations. The named list of providers and the locations in use is available to customers on request at ",{"type":14,"tag":28,"props":82,"children":83},{"href":30},[84],{"type":20,"value":33},{"type":20,"value":86},".",{"type":14,"tag":35,"props":88,"children":90},{"id":89},"sub-processors",[91],{"type":20,"value":92},"Sub-processors",{"type":14,"tag":94,"props":95,"children":96},"table",{},[97,121],{"type":14,"tag":98,"props":99,"children":100},"thead",{},[101],{"type":14,"tag":102,"props":103,"children":104},"tr",{},[105,111,116],{"type":14,"tag":106,"props":107,"children":108},"th",{},[109],{"type":20,"value":110},"Sub-processor",{"type":14,"tag":106,"props":112,"children":113},{},[114],{"type":20,"value":115},"Purpose",{"type":14,"tag":106,"props":117,"children":118},{},[119],{"type":20,"value":120},"Location",{"type":14,"tag":122,"props":123,"children":124},"tbody",{},[125,144,162,180,198,216],{"type":14,"tag":102,"props":126,"children":127},{},[128,134,139],{"type":14,"tag":129,"props":130,"children":131},"td",{},[132],{"type":20,"value":133},"Fly.io",{"type":14,"tag":129,"props":135,"children":136},{},[137],{"type":20,"value":138},"Gateway processing",{"type":14,"tag":129,"props":140,"children":141},{},[142],{"type":20,"value":143},"Amsterdam (Netherlands), Frankfurt (Germany), Stockholm (Sweden), London (United Kingdom), Toronto (Canada), Ashburn, Chicago and Los Angeles (United States)",{"type":14,"tag":102,"props":145,"children":146},{},[147,152,157],{"type":14,"tag":129,"props":148,"children":149},{},[150],{"type":20,"value":151},"Google Cloud Platform",{"type":14,"tag":129,"props":153,"children":154},{},[155],{"type":20,"value":156},"Control plane, key storage, logging and monitoring",{"type":14,"tag":129,"props":158,"children":159},{},[160],{"type":20,"value":161},"Frankfurt, Germany",{"type":14,"tag":102,"props":163,"children":164},{},[165,170,175],{"type":14,"tag":129,"props":166,"children":167},{},[168],{"type":20,"value":169},"Cloudflare",{"type":14,"tag":129,"props":171,"children":172},{},[173],{"type":20,"value":174},"Website hosting and DNS",{"type":14,"tag":129,"props":176,"children":177},{},[178],{"type":20,"value":179},"Global network; processed nearest the visitor",{"type":14,"tag":102,"props":181,"children":182},{},[183,188,193],{"type":14,"tag":129,"props":184,"children":185},{},[186],{"type":20,"value":187},"Sentry",{"type":14,"tag":129,"props":189,"children":190},{},[191],{"type":20,"value":192},"Error monitoring and session replay (gateways and web applications)",{"type":14,"tag":129,"props":194,"children":195},{},[196],{"type":20,"value":197},"Frankfurt, Germany (Sentry's EU data region). Sentry is a US company, so its staff may access the data from the United States.",{"type":14,"tag":102,"props":199,"children":200},{},[201,206,211],{"type":14,"tag":129,"props":202,"children":203},{},[204],{"type":20,"value":205},"Mailgun",{"type":14,"tag":129,"props":207,"children":208},{},[209],{"type":20,"value":210},"Service communications",{"type":14,"tag":129,"props":212,"children":213},{},[214],{"type":20,"value":215},"EU region",{"type":14,"tag":102,"props":217,"children":218},{},[219,224,229],{"type":14,"tag":129,"props":220,"children":221},{},[222],{"type":20,"value":223},"InfluxData",{"type":14,"tag":129,"props":225,"children":226},{},[227],{"type":20,"value":228},"Operational metrics",{"type":14,"tag":129,"props":230,"children":231},{},[232],{"type":20,"value":161},{"type":14,"tag":22,"props":234,"children":235},{},[236],{"type":20,"value":237},"Google Cloud Platform and Cloudflare also act as storage providers, as described above.",{"type":14,"tag":22,"props":239,"children":240},{},[241],{"type":20,"value":242},"We give 30 days' notice before adding or replacing a sub-processor.",{"type":14,"tag":35,"props":244,"children":246},{"id":245},"security-and-compliance-information",[247],{"type":20,"value":248},"Security and compliance information",{"type":14,"tag":22,"props":250,"children":251},{},[252,254,262],{"type":20,"value":253},"Each sub-processor publishes its own certifications and audit reports. We rely on them and provide them to customers on request (see clause C.8 of the ",{"type":14,"tag":28,"props":255,"children":259},{"href":256,"rel":257},"https://ironshard.ai/legal/dpa",[258],"nofollow",[260],{"type":20,"value":261},"Data Processing Agreement",{"type":20,"value":263},").",{"type":14,"tag":94,"props":265,"children":266},{},[267,282],{"type":14,"tag":98,"props":268,"children":269},{},[270],{"type":14,"tag":102,"props":271,"children":272},{},[273,277],{"type":14,"tag":106,"props":274,"children":275},{},[276],{"type":20,"value":110},{"type":14,"tag":106,"props":278,"children":279},{},[280],{"type":20,"value":281},"Published information",{"type":14,"tag":122,"props":283,"children":284},{},[285,304,348,367,386,405],{"type":14,"tag":102,"props":286,"children":287},{},[288,292],{"type":14,"tag":129,"props":289,"children":290},{},[291],{"type":20,"value":133},{"type":14,"tag":129,"props":293,"children":294},{},[295,302],{"type":14,"tag":28,"props":296,"children":299},{"href":297,"rel":298},"https://fly.io/compliance",[258],[300],{"type":20,"value":301},"Compliance",{"type":20,"value":303},": SOC 2 Type 2 audited; infrastructure in ISO 27001 data centres. SOC 2 report available from Fly.io.",{"type":14,"tag":102,"props":305,"children":306},{},[307,311],{"type":14,"tag":129,"props":308,"children":309},{},[310],{"type":20,"value":151},{"type":14,"tag":129,"props":312,"children":313},{},[314,321,323,330,332,339,341],{"type":14,"tag":28,"props":315,"children":318},{"href":316,"rel":317},"https://cloud.google.com/compliance",[258],[319],{"type":20,"value":320},"Compliance resource center",{"type":20,"value":322},", including ",{"type":14,"tag":28,"props":324,"children":327},{"href":325,"rel":326},"https://cloud.google.com/security/compliance/iso-27001",[258],[328],{"type":20,"value":329},"ISO/IEC 27001",{"type":20,"value":331},", ",{"type":14,"tag":28,"props":333,"children":336},{"href":334,"rel":335},"https://cloud.google.com/security/compliance/soc-2",[258],[337],{"type":20,"value":338},"SOC 2",{"type":20,"value":340}," and the ",{"type":14,"tag":28,"props":342,"children":345},{"href":343,"rel":344},"https://cloud.google.com/security/compliance/compliance-reports-manager",[258],[346],{"type":20,"value":347},"Compliance Reports Manager",{"type":14,"tag":102,"props":349,"children":350},{},[351,355],{"type":14,"tag":129,"props":352,"children":353},{},[354],{"type":20,"value":169},{"type":14,"tag":129,"props":356,"children":357},{},[358,365],{"type":14,"tag":28,"props":359,"children":362},{"href":360,"rel":361},"https://www.cloudflare.com/trust-hub/compliance-resources/",[258],[363],{"type":20,"value":364},"Trust Hub: compliance resources",{"type":20,"value":366},". Compliance documents are available through Cloudflare's dashboard.",{"type":14,"tag":102,"props":368,"children":369},{},[370,374],{"type":14,"tag":129,"props":371,"children":372},{},[373],{"type":20,"value":187},{"type":14,"tag":129,"props":375,"children":376},{},[377,384],{"type":14,"tag":28,"props":378,"children":381},{"href":379,"rel":380},"https://sentry.io/trust/",[258],[382],{"type":20,"value":383},"Trust",{"type":20,"value":385},": SOC 2 Type 2 report and ISO 27001 certificate",{"type":14,"tag":102,"props":387,"children":388},{},[389,393],{"type":14,"tag":129,"props":390,"children":391},{},[392],{"type":20,"value":223},{"type":14,"tag":129,"props":394,"children":395},{},[396,403],{"type":14,"tag":28,"props":397,"children":400},{"href":398,"rel":399},"https://influxdata.com/security/",[258],[401],{"type":20,"value":402},"Security",{"type":20,"value":404},": SOC 2 Type 2 and ISO 27001",{"type":14,"tag":102,"props":406,"children":407},{},[408,412],{"type":14,"tag":129,"props":409,"children":410},{},[411],{"type":20,"value":205},{"type":14,"tag":129,"props":413,"children":414},{},[415],{"type":14,"tag":28,"props":416,"children":419},{"href":417,"rel":418},"https://www.mailgun.com/legal/security/",[258],[420],{"type":20,"value":421},"Mailgun security and compliance",{"title":7,"searchDepth":423,"depth":423,"links":424},2,[425,426,427],{"id":37,"depth":423,"text":40},{"id":89,"depth":423,"text":92},{"id":245,"depth":423,"text":248},"markdown","content:pages:legal:sub-processors.md","content","pages/legal/sub-processors.md","pages/legal/sub-processors","md",[],1791653899287]