Compliance / Sub-processors
Sub-processor register
Last updated: 2026-06-11
Formward acts as a processor on your behalf and engages the sub-processors below to provide the Service. Every sub-processor that touches form-submission data is located in the EU/EEA, and Cloudflare Turnstile — the only US-touching processor that can ever see submission-adjacent data — is engaged only at your option, per form. Two processors involve the US: optional Cloudflare Turnstile, and Stripe for billing of paying customers (Stripe never receives form-submission data). This register is the canonical, current list; it is referenced by our Data Processing Agreement.
| Sub-processor | Purpose | Location | Data processed | Scope |
|---|---|---|---|---|
| Hostup AB | Cloud hosting and the PostgreSQL database that stores submissions, account data, and backups | Sweden (EU) | Full submission payloads, account data, file attachments, hashed submitter IPs | Always |
| Mailjet (Sinch) | Transactional email delivery of submission-notification emails to form owners | EU (French data centre) | Recipient email address and notification content (which can echo submission fields) | Always |
| Mistral AI | Optional AI enrichment of submissions (spam scoring, summarisation, lead scoring) | EU (France) | Submission content, only for forms on a plan with AI enabled and only when AI features are used | Optional |
| Cloudflare, Inc. | Optional anti-bot challenge (Cloudflare Turnstile), enabled per form by the customer | United States | Challenge-related data from the visitor's browser. Formward does not send the submitter's IP address to Cloudflare unless the operator opts in to forwarding it. | Optional |
| Stripe Payments Europe, Ltd. | Subscription billing and payment processing for paying customers (merchant of record). Stripe never receives form-submission data. | EU contracting entity (Dublin, Ireland); parent Stripe, Inc. (United States). Billing data is processed partly in the US under SCCs and the EU–US Data Privacy Framework. | The paying customer's name, email address, billing address, and payment-method details. No form-submission content or submitter PII. | Always |
| Plausible Analytics | Optional, cookieless, privacy-friendly product analytics for the Formward marketing site and dashboard | EU (Germany) | Aggregate, cookieless usage metrics. No form-submission content and no submitter PII. | Optional |
Optional sub-processors
Mistral AI is engaged only for forms whose owner is on a plan that includes AI features and only when those features are actually used. Free-plan submissions are never sent for AI enrichment. Mistral processes data within the EU.
Cloudflare Turnstile is off by default and used only on forms where you explicitly enable the anti-bot challenge. When enabled, the visitor's browser loads and solves the Turnstile widget, so Cloudflare (a US provider) processes challenge-related data from the browser. Formward's server-side verification call does not transmit the submitter's IP address to Cloudflare. To keep all processing in the EU/EEA, simply leave Turnstile disabled. See the transfer-impact statement for the safeguard posture.
Plausible Analytics is a cookieless, privacy-friendly analytics provider hosted in the EU (Germany). It records only aggregate usage of the Formward marketing site and dashboard. It does not receive form-submission content or submitter PII and sets no tracking cookies.
Billing sub-processor (Stripe)
Payments are handled by Stripe Payments Europe, Ltd. (our contracting entity in Dublin, Ireland), whose parent is Stripe, Inc. in the United States. Stripe acts as merchant of record for subscription billing. To do so it processes the paying customer's own personal data — name, email address, billing address, and payment-method details — and some of this billing data is processed in the US under Standard Contractual Clauses and the EU–US Data Privacy Framework, where Stripe is certified.
This is distinct from your form data. Stripe never receives form-submission content or the personal data of the people who fill in your forms; that data stays within the EU/EEA sub-processors listed above. The Stripe touchpoint concerns only the billing relationship between Formward and its paying customers, in line with how most EU SaaS handles card payments. See the transfer-impact statement for the safeguard posture.
Change-notification commitment
We maintain the current sub-processor list on this page. Before we add or replace a sub-processor, we will give affected customers prior notice and a reasonable opportunity to object on legitimate data-protection grounds. If you object and we cannot reasonably accommodate the objection, you may terminate the affected part of the Service as set out in the DPA. Formward remains responsible to you for each sub-processor's performance of its obligations. To be notified of changes, contact privacy@formward.eu.