Sub-processors
Required under GDPR Art. 28 and POPIA. Customers receive 30 days' notice of any addition.
Auto-generated from deploy/config/sub-processors.yaml.
Currently engaged sub-processors
| Name | Purpose | Region | Data categories | DPA | Tier | Added |
|---|---|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud infrastructure (EKS, RDS, S3, KMS, Route53, ECR) hosting the tenant plane and model plane. | af-south-1 (tenant plane); eu-central-1 (model plane) |
| View | Critical | 2026-06-01 |
| Together AI, Inc. | Engaged ONLY when a customer explicitly enables BYO-Together on a specific collection. The customer's own Together API key is used. Disabled by default; never engaged on a customer's behalf without per-collection opt-in. The console surfaces a warning at opt-in time that the prompt leaves the feder8d boundary. | United States |
| View | Optional | 2026-06-01 |
| Dodo Payments Pvt. Ltd. | Merchant of record for SaaS billing (Starter, Pro, Business plans). Handles card processing, invoicing, and tax remittance. PCI scope is theirs, not ours. | United States, India, EU |
| View | Critical | 2026-06-01 |
| SMTP2Go Ltd | Transactional email delivery (account verification, password reset, billing notifications, DSAR confirmations, breach notices). Also carries invite / password-reset NOTIFICATIONS relayed from connected on-prem installs that use the default managed mail relay: only the recipient address, subject and set-password link transit feder8d — never customer documents, prompts or chat, and feder8d's relay audit stores the recipient's domain only. On-prem customers can switch to their own SMTP (or no email) at any time, and air-gapped installs never use the relay. Delivered via standard SMTP — the platform's email provider is pluggable, so this entry may be substituted with AWS SES, Mailgun, Postmark or any equivalent SMTP-capable provider without code changes. | United States (or European Union if EU SMTP host is used) |
| View | Standard | 2026-06-08 |
| Cloudflare, Inc. | Static CDN for the public marketing site feder8d.com. Serves HTML/CSS/JS only. No tenant data crosses this sub-processor — application code is not on Cloudflare. | Global (Cloudflare anycast edge) |
| View | Standard | 2026-06-01 |
| Vanta, Inc. | Compliance evidence collection for SOC 2 Type II observation. Read-only integrations into AWS, GitHub, and HR system. Collects metadata about controls — not tenant data. | United States |
| View | Optional | 2026-06-01 |
Explicitly not sub-processors
Common assumptions worth heading off:
| WorkOS | Authentication is internal email + password (argon2id, NIST 800-63B), owned and operated by feder8d. No third-party identity provider or IdP-as-a-service is used, so there is no identity sub-processor. |
|---|---|
| Authentik / any hosted IdP | feder8d runs its own internal credential store (email + password, argon2id). It does not delegate authentication to Authentik, WorkOS, Auth0, or any other hosted identity provider. Enterprise SSO (SAML/OIDC) is on the roadmap; if enabled it federates to the CUSTOMER's own IdP — feder8d never becomes a sub-processor of that IdP. |
| OpenAI | No OpenAI dependency. The OpenAI-compatible chat API is a thin adapter feder8d implements; no requests are sent to OpenAI. |
| Anthropic | Not a sub-processor. Build-time use only by feder8d engineering staff. |
How to subscribe to changes
Email legal@feder8d.com with subject line Sub-processor notifications to receive 30 days advance notice of additions or removals. Enterprise customers receive notice automatically per their MSA.