Security & Legal
Subprocessors
Fillout’s subprocessors.
GDPR
For more details specific to GDPR, see:
Subprocessors
| Subprocessor | Use | Country | GDPR Compliance | May process submission data (form results) |
|---|---|---|---|---|
| Render (infrastructure on AWS) | Hosting and storage | US and EU (EU only for EU submission hosting customers)* | Learn more | Yes |
| AWS | File storage (S3) | US or EU (for EU submission hosting customers)* | Learn more | Yes |
| Postmark | US | Learn more | Yes | |
| Stripe | Payments | US | Learn more | Yes |
| Cloudflare | CDN | Worldwide | Learn more | Yes |
| WorkOS | SSO | US | Learn more | Yes (Enterprise SSO login users only) |
| Amplitude | Analytics | US | Learn more | No |
| Segment | Event pipeline | US | Learn more | No |
| Google (Gmail) ** | Support | US | Learn more | No |
| Intercom ** | Support | US | Learn more | No |
| Sentry | Error logging | US | Learn more | No |
| Datadog | Monitoring | US | Learn more | No |
| OpenAI | AI + transcription | US (does not apply for EU submission hosting customers) | Learn more | Yes (opt-in, e.g. if transcription is enabled on “voice recording” field) |
| Microsoft Azure | AI + transcription | EU (only for EU submission hosting customers) | Learn more | Yes (opt-in, e.g. if transcription is enabled on “voice recording” field) |
* And/or other regions for enterprise customers, if explicitly specified in agreement (e.g. Canada, Australia)
** Used to provide support to respondents if they contact Fillout for support or to exercise their rights as data subjects.