Sub-processors
The companies that help us run toro4n, what each one does, and how your data is protected outside the EU.
The table below lists the sub-processors that handle personal data in team models under our Data Processing Agreement. On a Team plan, we email the team manager at least 30 days before adding or replacing a sub-processor.
| Company | Role | Location | Transfer basis |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, online model storage, backups, and email | Cloudflare, Inc. is based in the United States. Stored data stays within the EU. Requests are handled at the data center nearest the visitor, which may be outside the EU. | EU-U.S. Data Privacy Framework (adequacy decision (EU) 2023/1795), with standard contractual clauses as the fallback |
Cloudflare's sub-processors are listed on its website.
Other companies that receive personal data
These companies don't process team models for us. Depending on the service, either we or they are the data controller, as our Privacy Policy explains.
| Company | Role | Location | Transfer basis |
|---|---|---|---|
| Stripe Technology Europe, Limited, and Stripe, LLC | Payments, tax calculation, invoices, and receipts | Ireland and the United States | EU-U.S. Data Privacy Framework and standard contractual clauses, under Stripe's Data Transfer Addendum |
| Google Ireland Limited and Google LLC | Google sign-in, and Gmail for email sent to @toro4n.com | Ireland and the United States | EU-U.S. Data Privacy Framework (Google LLC) |
| Anthropic Ireland, Limited | Claude, which helps us read email sent to @toro4n.com | Ireland, with transfers outside the EU | Adequacy decisions and standard contractual clauses, as stated in Anthropic's privacy policy |
AI assistants aren't listed here because you or your team choose and connect them. Anything an assistant reads goes to the company behind it, under that company's terms.
Last updated November 1, 2026.