https://formendi.com/service-providers
Service providers
Formendi uses the providers below for the stated services. The table lists roles, data, locations and what is currently confirmed. Email delivery is omitted until SMTP is configured.
| Provider | Service and role | Data | Locations | Safeguards | Retention |
|---|---|---|---|---|---|
| Hetzner Hetzner Online GmbH Hetzner |
Application hosting (processor) | Account and workspace records stored to operate Formendi | Helsinki, Finland | Hosting in the EEA. Accepted processor terms and backup locations are recorded internally before they are listed as verified here. | Follows the workspace retention schedule in the Privacy Notice |
| Cloudflare Cloudflare, Inc. Cloudflare |
DNS, reverse proxy, TLS termination and WAF (processor; some signals may be used by the provider for its own security purposes) | Requests and responses in transit, including IP and device metadata. Customer page content can transit the proxy. | Global edge network. Do not read this as a claim that all processing stays in the EU. | TLS in transit to the edge. Origin TLS details and the provider DPA are published as verified only after they are confirmed. | Provider log periods are configured on the Cloudflare account and are verified separately |
| Cloudflare Turnstile Cloudflare, Inc. Cloudflare Turnstile |
Bot checks on public sign-in and waitlist forms (security processor; the provider may also improve Turnstile as a separate controller) | Browser, TLS and network signals for the form origin, including IP | Cloudflare global infrastructure | Used only on those public forms. The Turnstile addendum is recorded internally. | As set in the enabled Turnstile configuration |