Foresite Subprocessors
Last updated: 7 October 2026
We'll email Customers at least 30 days before adding or replacing a subprocessor that handles Visitor data (see section 5 of the DPA).
Processes Visitor analytics data
| Provider | Purpose | Data location |
|---|---|---|
| Fly.io, Inc. | Application hosting and event collection | EU (Frankfurt, Germany) |
| DigitalOcean, LLC | Database: analytics events and account data | EU (Frankfurt, Germany) |
Fly.io and DigitalOcean also handle Customer account data, since the dashboard and the database hold both.
Processes Customer account data only
| Provider | Purpose | Data location |
|---|---|---|
| Paddle.com Market Ltd (Merchant of Record) | Checkout, payments, tax, invoicing | UK / global |
| Amazon Web Services (Amazon SES) | Sign-in links, service emails, Email Reports | EU (Frankfurt, Germany) |
| Google LLC | Sign-in, only if you choose "Continue with Google"; our email inbox, for emails you send us | US / global |
| Cloudflare, Inc. | DNS, and forwarding emails you send to our @foresite.dev addresses | US / global |
Paddle, and Google for "Continue with Google", act as independent controllers for the data they collect directly from you. They're listed here for transparency.
Location (country and region) is looked up from a database stored on our own servers. No IP address is sent to a third party for this.