Who we trust to run FRIENDA.
Last updated: 17 June 2026
A sub-processor is a company we use to deliver FRIENDA that may process personal data on our behalf. This is the complete list. We hold each one to written data-protection terms and appropriate security measures, and we stay responsible to you for what they do.
Infrastructure
- Cloudflare, Inc. (United States) — hosting, edge compute (Workers), database (D1), object storage for signed PDFs (R2), and short-lived token cache (KV). This is where your account data and NDAs live. Cloudflare is certified under the EU–US Data Privacy Framework.
- Apple Inc. (United States) — Sign in with Apple (identity exchange) and the Apple Push Notification service (sign/decline alerts). Apple only handles your Apple identifier and push tokens.
Messaging (only when you use a recipient identity lock)
- Resend (Plus Five Five, Inc.) (United States) — sends a one-time verification code by email when a sender locks an NDA to an email address. Also sends account emails (verify address, password reset).
- Twilio Inc. (United States) — sends a one-time verification code by SMS when a sender locks an NDA to a phone number. Dormant unless SMS lock is used.
What we don't use
No analytics providers, no advertising networks, no trackers, no data brokers, no customer-data CRMs. FRIENDA ships zero third-party tracking code.
Changes to this list
Before we add or replace a sub-processor that handles personal data, we'll update this page and give at least 30 days' notice to customers who subscribe to changes (email hi@frienda.chat with subject "Subprocessor updates" to subscribe). If you have a reasonable, data-protection-based objection, tell us within that window; if we can't address it, you may stop using FRIENDA and delete your account before the change takes effect.
Contact
Questions about a sub-processor or a transfer mechanism — hi@frienda.chat.