Subprocessors

To run FlowState we rely on a small, named set of service providers, called subprocessors. Each one handles only the data it needs to provide its service. We do not sell your data, and none of it is used to train AI models.

Vercel

Purpose: hosting and content delivery for the application. Data handled: the pages and requests that make the site work, plus aggregate, privacy-respecting traffic measurement. Where: United States cloud infrastructure.

Supabase

Purpose: database, authentication, and file storage. Data handled: the records the platform stores, including assessment answers, form submissions, organization member details, and any uploaded files. Where: United States cloud infrastructure.

Anthropic

Purpose: the AI models behind our assistant and generative features. Data handled: the content sent to generate a response, after we exclude or pseudonymize personal identifiers. Anthropic does not retain that content to train its models, per its data policy. Where: United States cloud infrastructure.

Email delivery

Purpose: sending transactional email, such as a sign-in link or a notification, when a feature requires it. Data handled: the recipient address and the message content for that email. If and where email is enabled for your engagement, this is the provider that carries it. Where: United States cloud infrastructure.

Our commitments

We share with each provider only what it needs. We do not sell personal information to anyone. We do not permit any subprocessor to use your content to train AI models. When we add or change a subprocessor, we update this page.

This list reflects the providers in use today. We update it as the platform changes.