Legal
Sub-processors
Last updated August 23, 2026
This page lists the vendors we use to provide the Services. It is the current list referenced by Annex III of our Data Processing Agreement and by our Privacy Policy.
WHAT THIS PAGE IS
In Short: A sub-processor is a vendor we use to help run the Services. This page names each one, what it does, and where it operates. We keep it up to date and give notice before adding a new sub-processor that processes Customer Data.
"Customer Data" is the data you connect to or create in the Services. "Account Data" is your name, login email, billing details, and how you use the Services, which we handle as an independent controller under our Privacy Policy.
SUB-PROCESSORS THAT MAY PROCESS CUSTOMER DATA
These vendors may process personal data contained in Customer Data. In a bring-your-own-cloud (BYOC) deployment, the data plane (storage, compute, and orchestration) runs inside your own Google Cloud or AWS account, under your own agreement with that provider.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database and file storage for account, workspace, and pipeline metadata; control-plane storage. | United States |
| Fly.io, Inc. | Application hosting for the web app and API. | United States |
| Google Cloud (Google LLC) and Amazon Web Services, Inc. | Cloud infrastructure. In a BYOC deployment the data plane runs in your own account with that provider, not ours. | United States, or your own account |
| Anthropic, PBC | AI model provider for AI features. Receives the request, relevant table and column names and types, and, where the feature needs it, query results or samples. | United States |
| OpenAI, L.L.C. | AI model provider for AI features. Receives the request, relevant table and column names and types, and, where the feature needs it, query results or samples. | United States |
| Google LLC | AI model provider for AI features. Receives the request, relevant table and column names and types, and, where the feature needs it, query results or samples. | United States |
| Braintrust Data, Inc. | AI observability. Stores traces of AI-feature requests for debugging and quality. | United States |
| Functional Software, Inc. (Sentry) | Error monitoring. Error reports are sent with default personal identifiers turned off. | United States |
| Resend, Inc. | Transactional email: workspace invitations, alerts, and digests, which may include metadata such as table names and data-quality results. | United States |
VENDORS THAT PROCESS ACCOUNT DATA ONLY
These vendors process Account Data only. They do not process Customer Data, so they are not sub-processors under the DPA, but we list them here for transparency.
| Vendor | Purpose | Location |
|---|---|---|
| Better Stack, Inc. | Public status page hosting at status.optimaflo.io. Sees status-page visitors, meaning their IP addresses and browser data, never Customer Data or app Account Data. | European Union and United States |
| PostHog, Inc. | Product analytics for how the app is used. Browser analytics run only after you consent in the cookie banner. | United States |
| Stripe, Inc. | Payment processing and subscription billing. Card details go to Stripe directly; we never receive full card numbers. | United States |
HOW WE ADD OR CHANGE A SUB-PROCESSOR
We give at least 30 days' notice before a new sub-processor processes Customer Data, by email to the owners and admins of your organization and by updating this page. If we must replace a sub-processor urgently to protect the security or continuity of the Services, we will notify you as soon as reasonably possible instead.
If you object to a new sub-processor on reasonable data protection grounds, you have the rights set out in Section 7 of our Data Processing Agreement.
To be notified directly when this list changes, email evan.rosa@optimaflo.io with the subject "Sub-processor notices."
CHANGE LOG
| Date | Change |
|---|---|
| August 23, 2026 | Added Better Stack (public status page hosting). |
| August 22, 2026 | Page published with the initial list. |
CONTACT
Questions about this list or a specific sub-processor: email evan.rosa@optimaflo.io or write to OptimaFlo, LLC, 18310 Montgomery Village Ave, Gaithersburg, MD 20879, United States.