Sub-processors
The third parties that process personal data on Isolation's behalf, what each does, and where it is.
Version 1.0 (draft) — 22 September 2026
The third parties that process personal data on our behalf to provide Isolation Cloud, what each one does, and where it is. This list is part of the Privacy Policy (isolation.cloud/legal/privacy). We email organizations' owners before adding a sub-processor that will handle Customer Content.
| sub-processor | what it does for the Service | location |
|---|---|---|
| Cloudflare, Inc. | application hosting (Workers), database (D1), file storage (R2), the tunnels to connected servers, the login form's bot check (Turnstile), DNS | United States; data centres worldwide, including the EU |
| Hetzner Online GmbH | the control-plane hosts that create and manage Cloud Sessions | Germany (Nuremberg, Falkenstein), Finland (Helsinki) |
| Fly.io, Inc. | the machines Cloud Sessions run on, in the region the organization chose | United States; machines in Amsterdam, Frankfurt, Paris, London, Stockholm |
| Stripe, Inc. | payments, invoices, receipts | United States, Ireland |
| Resend, Inc. | transactional email (login codes, invitations, receipts, alerts) | United States |
| TypeSafe | the interpreter that turns a typed sentence into a command | to confirm |
| Groq, Inc. | transcription of push-to-talk audio | United States |
| GitHub, Inc. | when connected: sign-in avatar, repository access for sessions | United States |
| Slack Technologies, LLC | when installed: the Slack app's messages and events | United States |
| Microsoft Corporation | when installed: the Teams app's messages and events | United States, EU |
Not sub-processors, because you contract with them directly: the AI providers whose credentials you give your agents (Anthropic, OpenAI, and others), and the machines you connect as servers.