Legal / Subprocessors
EdgeCMS Cloud Subprocessors
DRAFT — not in force. Confirm each provider's legal entity, region and data-processing terms before publication.
Last updated: [EFFECTIVE DATE]
These third parties process customer data to run EdgeCMS Cloud. We give at least 30 days' notice before adding or replacing one (see the Data Processing Addendum, section 7). To get notices, email [PRIVACY EMAIL].
| Subprocessor | What they do for us | Data | Location | When |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting (Workers), database (D1), storage (R2, KV), CDN, queues, search (Vectorize), AI Gateway, bot checks (Turnstile) | All customer and account data | Global edge network; headquartered in the United States | Always |
| Stripe, Inc. and affiliates | Payments, subscriptions, invoices, tax | Billing contact, company, tax ID, payment details | United States, Ireland and others | Paid plans |
| Alibaba Cloud (Model Studio / DashScope) | AI suggestions with Qwen models | Content sent to AI features and needed context | [REGION, for example Singapore] | Only when a workspace turns AI on |
| Google LLC | AI suggestions with Gemini models (fallback); Google sign-in | Content sent to AI features; sign-in identity | United States and others | AI on, or Google sign-in used |
| Microsoft Corporation | Microsoft sign-in (Entra ID) | Sign-in identity | United States and others | Only if you sign in with Microsoft |
| [EMAIL PROVIDER] | Transactional email (verification, security, billing, limit alerts) | Name, email, message content | [REGION] | Always |
We do not use subprocessors for advertising, and none of them may use customer data to train AI models under our agreements.