Subprocessors
Third-party providers that process personal data to operate Filosign. Subscription checkout data may also be processed by Dodo Payments as Merchant of Record under Dodo's privacy policy.
Last updated: June 19, 2026
Overview
Filosign uses service providers ("Subprocessors") to host the Service, deliver email, authenticate users, store encrypted files, run analytics, and process subscriptions. This list reflects providers present in the current codebase. It is not a representation that every provider is active in every environment or that required transfer safeguards have been completed.
Merchant of Record: Dodo Payments, Inc. processes subscription checkout and payment data as an independent controller when you purchase a paid plan. See Dodo's privacy policy and our Privacy Policy.
Scroll horizontally to view all columns
| Entity | Purpose | Data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Marketing site hosting, CDN, DNS, and R2 object storage | Site traffic, encrypted document blobs, and storage metadata | Global / EU regions (as configured) |
| Hetzner Online GmbH | Application, database, and cache hosting (including Dragonfly session cache where deployed) | Account data, document metadata, audit logs, application and API logs, session cache entries | Germany / Finland (EU) |
| Amazon Web Services (SES) | Transactional email delivery | Recipient names, email addresses, message content, and delivery events | Configured AWS region / Global support access |
| Resend, Inc. | Optional fallback transactional email delivery | Recipient names, email addresses, and delivery events | US / Global |
| thirdweb, Inc. | Wallet authentication, embedded wallets, and RPC | Wallet addresses, auth identifiers, and chain interaction logs | US / Global |
| PostHog, Inc. | Product analytics (consent-gated where required) | Usage events, device/browser metadata, and session identifiers | EU (Frankfurt, Germany) when EU hosting is enabled |
| Filecoin Onchain Cloud / Synapse storage providers | Optional encrypted document replication and purchased archival | Encrypted document blobs, content identifiers, storage-deal metadata, and payer wallet records | Decentralized storage network / Global |
| Telegram Bot API | Restricted operator alerts and support notifications when enabled | Sanitized operational alert context and submitted feedback previews | Global |
| Dodo Payments, Inc. | Merchant of Record: subscription checkout, tax, and billing | Customer email, plan, invoices, payment tokens, and fraud/compliance signals | US / Global |
Cloudflare may also process aggregate marketing-site traffic through Cloudflare Web Analytics when enabled. Public blockchain networks independently process public wallet addresses, transaction data, and contract events and are not controlled subprocessors.
Changes
We update this list when our infrastructure changes. For material additions of Subprocessors that process personal data on our behalf, we will provide notice through the Service or by email to registered account holders where practicable, and update this page.