Who we trust to run FRIENDA.
Last updated: 30 September 2026
A sub-processor is a company we use to deliver FRIENDA that may process personal data on our behalf. This is the complete list. We hold each one to written data-protection terms and appropriate security measures, and we stay responsible to you for what they do.
Infrastructure
- Cloudflare, Inc. (United States) — hosting, edge compute (Workers), database (D1), object storage for signed PDFs (R2), and short-lived token cache (KV). This is where your account data and NDAs live. Cloudflare is certified under the EU–US Data Privacy Framework.
- Apple Inc. (United States) — Sign in with Apple (identity exchange) and the Apple Push Notification service (sign/decline alerts). Apple only handles your Apple identifier and push tokens.
Messaging (only when you use a recipient identity lock)
- Resend (Plus Five Five, Inc.) (United States) — sends a one-time verification code by email when a sender locks an NDA to an email address. Also sends account emails (verify address, password reset).
- Twilio Inc. (United States) — sends a one-time verification code by SMS when a sender locks an NDA to a phone number. Dormant unless SMS lock is used.
Payments (only if you subscribe to FRIENDA Pro)
- RevenueCat, Inc. (United States) — manages FRIENDA Pro subscriptions and validates App Store purchase receipts. It receives your FRIENDA account identifier and your subscription status and history. It never receives your name, email address, or any NDA content. Apple, not RevenueCat, processes the payment itself and we never see your card details.
AI (only if you use FRIENDA AI)
- Anthropic, PBC (United States) — provides the Claude model behind FRIENDA AI, the optional Pro feature that answers questions about an agreement. When you ask a question, the agreement's text (and any PDF attached to it), your question, and the conversation so far are sent to Anthropic to produce the answer. Under Anthropic's commercial terms this data isn't used to train its models, and Anthropic keeps it only for a limited period for safety and abuse monitoring. Nothing is sent unless you use FRIENDA AI.
What we don't use
No analytics providers, no advertising networks, no trackers, no data brokers, no customer-data CRMs. FRIENDA ships zero third-party tracking code.
Changes to this list
Before we add or replace a sub-processor that handles personal data, we'll update this page and give at least 30 days' notice to customers who subscribe to changes (email hi@frienda.chat with subject "Subprocessor updates" to subscribe). If you have a reasonable, data-protection-based objection, tell us within that window; if we can't address it, you may stop using FRIENDA and delete your account before the change takes effect.
Contact
Questions about a sub-processor or a transfer mechanism — hi@frienda.chat.