About this list
This page lists the third-party processors Konfi Cloud uses to deliver the service. We notify workspace admins of a new or replacement subprocessor at least 30 days in advance through an in-product banner on the workspace dashboard, so admins can object on reasonable GDPR-related grounds as described in the data processing terms.
Active subprocessors
- Google (Firebase) – stores your account, sign-in, and workspace data, helps verify that requests come from the real Konfi Cloud app, and provides aggregate product analytics. Where: EU and United States. Transfer safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
- Stripe - our payment processor. Handles checkout, subscriptions, invoices, taxes, and card payments when you buy a paid plan. Where: United Kingdom, EU, and United States. Transfer safeguard: UK and EU adequacy where it applies, otherwise Standard Contractual Clauses.
- Vercel – hosts the Konfi Cloud website and apps, delivers them quickly worldwide, and is also our domain registrar. Where: EU and United States. Transfer safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
- Resend – sends and receives the emails Konfi Cloud uses (sign-in links, billing notifications, support replies). Where: United States. Transfer safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
- Sentry – error and performance diagnostics that help us fix bugs faster; the browser-side part only loads after you accept the diagnostics category in the cookie banner. Where: EU and United States. Transfer safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
Other providers and supporting services
- European Central Bank Frankfurter API – public currency exchange rates. Does not receive any personal data.
- Google sign-in – only used when you choose to sign in with Google; the sign-in itself is governed by Google's own terms.
Change notice and objection
When we plan to add or replace a subprocessor, we show an in-product banner to workspace admins at least 30 days before the change takes effect, and the Subprocessors page is updated at the same time. Admins who want email notice as well can subscribe by writing to support@getkonfi.com. Customers can object on reasonable GDPR-related grounds as described in the data processing terms.
Contact
Questions about this list can be sent to support@getkonfi.com.