Subprocessors
The parts we do not run ourselves, with where they run.
The parts and where they run
Each row is a part of the service, not a company. The names of the companies behind them are sent on request, as the named list below explains.
| The part | What it does | Where it runs |
|---|---|---|
| Application hosting | Serves the pages of each product | Global edge, with the work done in Singapore |
| Edge and background work | Everything that is not a page: queues, scheduled jobs and the mail server, which keeps no mail of its own | Global edge, with everything it stores kept in Singapore |
| Database | The directory, settings, audit and the search index | Singapore |
| Object storage | Mail, files, recordings and backups | Singapore |
| Mail sending | Delivering a message you send to its destination | the United States |
| Text messages | The one time codes used for a first sign in and recovery | Singapore |
| Meeting media | Carrying audio and video during a meeting | The node nearest the people in the meeting |
| Phone notices | Delivering a notice to the FLO app on iPhone and Android: who a message is from and where it arrived, never its subject or body | Global |
| App crash reports | Receiving a report when the app fails in a store build, with the phone model and app version but no name or account | United States |
| App updates | Serving fixes to the app's own code between store releases | Global |
| Payments | Booking payments and our own invoices | Global |
| Model provider | The escalated part of FLO IQ, with names replaced by tokens and retention off, only where a company allows it | United States |
What leaves the region
Mail, files, calendars and contacts live in Singapore. The mail server stores every message there too. Two things travel further, which we name rather than bury.
Sending a message passes through the sending service in the United States, so an outgoing message is processed there on its way out. Incoming mail does not leave Singapore.
Meeting media is carried by the node nearest the people in the meeting, so a meeting with somebody in London is carried near London. The recording and its transcript come back to Singapore.
The phone app adds two small things. A notice to a phone passes through the notice delivery service worldwide, carrying who a message is from and where it arrived but never its subject or body. A crash report from the app goes to the United States with no name or account attached. The mail, calendar and files the app shows still come from Singapore.
The named list
The named providers behind each part, their roles and their regions are given to any customer or prospective customer on request. Write to legal@fastflowup.com and we will send it.
We publish the parts rather than the names because naming the pieces of the infrastructure publicly tells an attacker where to look, while telling a buyer nothing they cannot get by asking.
Notice of a change
We give thirty days' notice to the administrators of every company before a provider is added or replaced. A company that objects on reasonable grounds may end its agreement for that reason, with a refund of anything paid for time it will not use.
What we hold them to
Each one is bound by terms that carry down the obligations in our data processing terms: to act only on instructions, to keep what they hold confidential, to protect it, to help us answer a request from one of your people, then to return or delete it at the end.