Guardexia uses the third-party providers below to host and operate the platform. Each processes data only as needed to deliver the service described.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Fly.io | Application hosting and managed PostgreSQL | All application and database content, operational logs | United Kingdom (primary region: London) |
| Cloudflare R2 | Object storage for uploaded evidence and source files | Customer-uploaded CSVs, bank statements, and related file metadata | Western Europe (WEUR) |
| Cloudflare Turnstile | Bot protection on public forms (e.g. signup/contact challenges) | Challenge tokens and limited request metadata (not reconciliation data) | Cloudflare global edge |
| Postmark (ActiveCampaign) | Transactional email delivery | Email addresses and notification content | United States (vendor standard regions) |
| Stripe | Subscription billing | Billing contact details and subscription metadata (not reconciliation data) | United States / EU (Stripe entity per customer) |
| Sentry (Functional Software) | Error monitoring and diagnostics | Stack traces, request metadata; PII off by default | European Union (organisation data storage region) |
| GitHub | Source control and CI/CD | Source code only (no production customer database content) | United States |
Guardexia maintains data processing terms with infrastructure vendors where available. Customer-specific DPAs and an updated subprocessor notice can be provided during enterprise onboarding. For questions, contact [email protected].