Subprocessors
Last updated 21 October 2026
Draft pending legal review
This document is a draft. It is being reviewed and may change.
These are the companies that handle personal data on our behalf, as allowed by the data processing agreement. We tell workspace owners before we add or replace one. Questions go to help@thisflow.com.
The service
| Company | What they do for thisflow | Data | Where |
|---|---|---|---|
| UpCloud (Finland) | The server and storage for the database, files and backups | Everything in thisflow | Stockholm, Sweden |
| Cloudflare (United States) | DNS, secure connections and protection against attacks in front of thisflow; hosting of thisflow.com | Traffic, including IP addresses | Cloudflare's global network |
| Amazon Web Services (United States) | Amazon SES: sending our emails, and receiving email to thisflow | Email addresses and email content | Stockholm, Sweden (sending) and Ireland (receiving) |
| Anthropic (United States) | The AI features, only when someone uses them | The text sent to the AI feature and the context it needs | United States |
| Migadu (Switzerland) | Our own mailbox, when you write to us | Your emails to us | Switzerland |
Only when you choose them
| Company | When | Data | Where |
|---|---|---|---|
| Google (United States) | You sign in with Google; you accept analytics or marketing cookies on thisflow.com | Basic profile; website usage | Global |
| Slack (United States) | You connect Slack | Slack ids, the messages you save as tasks | United States |
| Your browser's push service (Google, Apple or Mozilla) | You turn on push notifications | Encrypted notification content | Global |
Transfers outside the EU/EEA rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.