Compliance / Sub-processors
Sub-processor register
Last updated: 2026-08-21
Formward acts as a processor on your behalf and engages the sub-processors below to provide the Service. Every sub-processor that touches form-submission data is located in the EU/EEA, and Cloudflare Turnstile - the only US-touching processor that can ever see submission-adjacent data - is engaged only at your option, per form. Two processors involve the US: optional Cloudflare Turnstile, and Stripe for billing of paying customers (Stripe never receives form-submission data). This register is the canonical, current list; it is referenced by our Data Processing Agreement.
| Sub-processor | Purpose | Location | Data processed | Scope |
|---|---|---|---|---|
| Hostup AB | Cloud hosting and the PostgreSQL database that stores submissions, account data, and backups | Sweden (EU) | Full submission payloads, account data, file attachments, hashed submitter IPs | Always |
| Mailjet (Sinch) | Transactional email delivery of submission-notification emails to form owners | EU (French data centre) | Recipient email address and notification content (which can echo submission fields) | Always |
| Mistral AI | AI enrichment of submissions (spam scoring, summarisation, lead scoring). On AI-enabled plans this is ON by default and can be switched off per form. | EU (France) | Submission content, only for forms on a plan with AI enabled and only when AI features are used | AI plans, on by default |
| Cloudflare, Inc. | Optional anti-bot challenge (Cloudflare Turnstile), enabled per form by the customer | United States | Challenge-related data from the visitor's browser. Formward does not send the submitter's IP address to Cloudflare unless the operator opts in to forwarding it. | Optional |
| Stripe Payments Europe, Ltd. | Subscription billing and payment processing for paying customers (merchant of record). Stripe never receives form-submission data. | EU contracting entity (Dublin, Ireland); parent Stripe, Inc. (United States). Billing data is processed partly in the US under SCCs and the EU–US Data Privacy Framework. | The paying customer's name, email address, billing address, and payment-method details. No form-submission content or submitter PII. | Always |
Optional sub-processors
Mistral AI is engaged only for forms whose owner is on a plan that includes AI features. Free and Personal submissions are never sent for AI enrichment at all. Be aware that on the plans which do include AI, the AI features are on by default and can be switched off per form in the form's settings - unlike Cloudflare Turnstile below, which is off until you enable it. If you need to document a shorter processor list, turn the AI toggles off before your first submission. Mistral processes data within the EU (France).
Cloudflare Turnstile is off by default and used only on forms where you explicitly enable the anti-bot challenge. When enabled, the visitor's browser loads and solves the Turnstile widget, so Cloudflare (a US provider) processes challenge-related data from the browser. Formward's server-side verification call does not transmit the submitter's IP address to Cloudflare. To keep all processing in the EU/EEA, simply leave Turnstile disabled. See the transfer-impact statement for the safeguard posture.
Site measurement uses no sub-processor. Formward runs its own first-party, cookieless page-view measurement on its own EU infrastructure - no analytics vendor receives any data. See the Privacy Policy for exactly what it records.
Billing sub-processor (Stripe)
Payments are handled by Stripe Payments Europe, Ltd. (our contracting entity in Dublin, Ireland), whose parent is Stripe, Inc. in the United States. Stripe acts as merchant of record for subscription billing. To do so it processes the paying customer's own personal data - name, email address, billing address, and payment-method details - and some of this billing data is processed in the US under Standard Contractual Clauses and the EU–US Data Privacy Framework, where Stripe is certified.
This is distinct from your form data. Stripe never receives form-submission content or the personal data of the people who fill in your forms; that data stays within the EU/EEA sub-processors listed above. The Stripe touchpoint concerns only the billing relationship between Formward and its paying customers, in line with how most EU SaaS handles card payments. See the transfer-impact statement for the safeguard posture.
Change-notification commitment
We maintain the current sub-processor list on this page. Before we add or replace a sub-processor, we will give affected customers prior notice and a reasonable opportunity to object on legitimate data-protection grounds. If you object and we cannot reasonably accommodate the objection, you may terminate the affected part of the Service as set out in the DPA. Formward remains responsible to you for each sub-processor's performance of its obligations. To be notified of changes, contact privacy@formward.eu.