flowscope engages the following third parties to deliver and operate its services. Each is bound by a written contract, processes data in the United States, and is subject to data-protection obligations at least as protective as those in the customer agreement. flowscope remains liable to the customer for the performance of each subprocessor's data-protection obligations.
Current list
Accurate as of 2026-10-05.
| Subprocessor | Purpose | Data touched | Region | Retention |
|---|---|---|---|---|
| Microsoft Corporation | Cloud platform for the flowscope Services: application hosting, managed database, object storage, public edge, and transactional email | Customer data processed and persisted by the application; recipient addresses and message bodies for transactional email | United States | For the duration of the Services |
| OpenAI, L.L.C. | Large language model inference, including server-side redaction | Captured content after on-device redaction, for server-side redaction; redacted content submitted for analysis; prompts and outputs | United States | Zero Data Retention under contract |
Website vendors
These vendors support flowscope's public website: Vercel Inc. (website hosting for flowscope.com; site visitor request data and lead-form submissions), Google LLC (website analytics), Maverick Intelligence Inc. (B2B visitor identification, United States visitors) and LinkedIn Corporation (LinkedIn Insight Tag, advertising measurement, loaded only after consent). All four process in the United States.
Notification of changes
flowscope engages and replaces subprocessors at its discretion. This page is the authoritative list and the notice mechanism: flowscope updates it at least thirty days before a new subprocessor processes customer data. A customer may object on reasonable data-protection grounds within those thirty days, after which the parties work in good faith to resolve the objection.
Historical changes
- 2026-09-15 · Google Workspace (OAuth) and Microsoft Entra ID (OAuth) removed from the list. Sign-in identity providers are not subprocessors.
- 2026-09-14 · List restated to match the customer agreement. No subprocessor was added or removed.
- 2026-07-22 · Azure Storage (Microsoft) added to the list.