Subprocessors
Version 2026-10-01
Highlighted passages (7) are waiting for an owner decision or legal review and are not final. Everything else describes how Flowyn works today.
Active subprocessors
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Clerk, Inc. | Sign-in, sessions, organizations and memberships | Account data: name, email, sign-in metadata, organization membership | United States Pending owner decision: confirm with Clerk's DPA |
| Supabase, Inc. | Database and file storage | All account, workspace, billing records and Customer Data | Pending owner decision: confirm the production project region; the only Flowyn project found is in Sydney, Australia (ap-southeast-2) |
| Railway Corporation | Hosting of the Flowyn API and worker | All data in transit through the API and worker; server logs | Singapore (asia-southeast1) |
| Upstash, Inc. | Short-lived cache and rate limiting | Name, email and role for about one minute; hashed rate-limit counters; hashed destination ids | Pending owner decision: confirm the Upstash database region |
| Vercel Inc. | Hosting of flowyn.dev and app.flowyn.dev; web analytics if you allow it | Request data for the website and dashboard; page-view analytics | Global edge network Pending owner decision: confirm function region |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Server error reports without user identity; browser diagnostics if you allow them | Germany (EU) for the dashboard Pending owner decision: confirm the region of the server-side Sentry project |
| Formspree, Inc. | Delivery of support, contact and feedback forms | Email, message and the page details the form shows | United States Pending owner decision: confirm Formspree is the live provider and its DPA is accepted |
Independent controller
| Provider | Role | Data |
|---|---|---|
| Dodo Payments | Merchant of record for paid plans: checkout, payment, invoicing and tax | Name, email and workspace id that Flowyn sends at checkout; payment details you give Dodo Payments directly |
Not active
These are integrated in code but switched off or not configured in production. Flowyn will list them above, with notice, before turning them on.
- OpenRouter and the model providers it routes to: optional built-in AI assistance (off).
- Resend: transactional email (not configured).
Destinations you choose
Your own servers and the services you connect (for example Slack, Discord, Linear, GitHub, or an AI provider whose credential you test) receive what you configure Flowyn to send. They are not Flowyn's subprocessors.
Changes
We announce a new or replacement subprocessor here and by email to workspace owners before it processes Customer personal data, as described in the DPA. Pending owner decision: offer a subscription for change notices