Draft pending legal review. This is a working template; engage qualified counsel before relying on this for production contracts.
Sub-Processors
Version 1.0 (draft) · Last updated: 2026-05-01
Previous versions: (stub — will be linked when versioned)
FR8 Tech, Inc. (“FR8 Tech”) engages the third-party sub-processors listed below to provide the VisitorFlow service. Each sub-processor has executed a data processing agreement with FR8 Tech that imposes data protection obligations equivalent to those in the VisitorFlow Data Processing Addendum. This page is the single authoritative list; the DPA Annex 3 references this list directly.
Core sub-processors
These sub-processors are engaged for all tenants regardless of feature configuration.
| Vendor | Service provided | Data categories | Hosting region | DPA / SCCs |
|---|---|---|---|---|
Vercel | Web hosting, edge network, serverless functions | Operational data, HTTP requests, logs | US / Global | DPA ↗ |
Neon | Managed PostgreSQL database | All customer data + visitor PII | US | DPA ↗ |
Cloudflare R2 | Object storage for photos, signatures, exports, evidence packs | Visitor images, electronic signatures | Global | DPA ↗ |
Resend | Transactional email delivery | Recipient email address and name | US | DPA ↗ |
Stripe | Billing and payment processing | Billing contact details and payment metadata (no PAN stored) | US / EU | DPA ↗ |
Sentry | Error monitoring and performance tracing | Error stack traces, request metadata, user agent | US | DPA ↗ |
PostHog | Product analytics (with consent) | Pseudonymous usage events — no visitor PII | EU / US (configurable) | DPA ↗ |
Axiom | Structured request logging | Request logs with tenant_id, user_id, route | US | DPA ↗ |
Upstash Redis | Rate limiting and ephemeral session cache | IP address, kiosk ID hashes (ephemeral) | Global | DPA ↗ |
Inngest | Durable background job orchestration | Job names and payload metadata | US | DPA ↗ |
Optional sub-processors
These sub-processors are only engaged when the indicated feature is enabled by the tenant. If your tenant does not use the feature, no data is sent to these processors.
| Vendor | Service provided | Data categories | Hosting region | DPA / SCCs |
|---|---|---|---|---|
Twilio Optional — only when SMS / WhatsApp feature enabled | SMS and WhatsApp notifications | Recipient phone number and message body | US | DPA ↗ |
AWS Optional — only when face-matching feature enabled | Rekognition (face matching) and Textract (OCR) when enabled | Face embeddings and license images when biometric feature is enabled | US | DPA ↗ |
OpenAI Optional — only when voice assistant feature enabled | Realtime API powering the voice assistant kiosk | Voice transcript, function-call metadata | US | DPA ↗ |
ElevenLabs Optional — only when voice assistant feature enabled | Voice synthesis for kiosk audio responses | Generated audio and input text | US | DPA ↗ |
Notification of changes
FR8 Tech will provide at least 30 days’ advance notice before adding or replacing a sub-processor. Notice is delivered via:
- Email to the registered account address of each tenant.
- An in-app banner visible to all tenant admins.
- An update to this page with a changelog entry.
Tenants who object to a new sub-processor on data-protection grounds may notify FR8 Tech in writing within the 30-day notice period. See Section 3.2 of the DPA for the full objection procedure.
Subscribe to sub-processor change notices — email privacy@visitorflow.com with the subject “Subscribe: sub-processor notices” to receive email updates. (A self-service subscribe link will be added here once the preference centre is live.)
Questions about this list? Email privacy@visitorflow.com.