| Kind | Sub-processor | What it does | Data | Location |
|---|---|---|---|---|
| Hosting providers | [names and legal entities] | Provide the servers that run our hosts, edges and control plane | All Customer Content in the Regions they serve | [countries] |
| Object storage providers | Cloudflare, Inc. (R2)[; others: names and legal entities] | Keep encrypted copies of disks and memory, Backups, Log pieces and encrypted database backups, and the copy of the database that keeps the standby up to date | Customer Content, encrypted as in Annex II | [countries] |
| Payment processor | Stripe ([Stripe legal entity]) | Takes payments, issues invoices, calculates tax, prevents fraud | Billing contacts and payment data; no Customer Content | [countries] |
| Email provider | Cloudflare, Inc. (Cloudflare Email Service) | Sends the notices we email to your Account | Email addresses of your Account and members, and the notices’ text; no Customer Content | [countries] |
| [Other kinds, if used: DNS, certificate authority, container image mirror] | [names] | [what they do] | [data] | [countries] |
Sub-processors
The companies that process personal data for us. This is Annex III of the Data Processing Agreement, word for word.