[{"data":1,"prerenderedAt":650},["ShallowReactive",2],{"content:page:/pages/legal/sub-processors":3,"markdown-page-nav:none":649},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"cta":6,"body":10,"_type":643,"_id":644,"_source":645,"_file":646,"_stem":647,"_extension":648},"/pages/legal/sub-processors","legal",false,"","Storage Providers and Sub-processors","The 12 storage providers IronShard distributes coded fragments across, and the sub-processors that process personal data, with purposes, locations, and compliance information.",{"type":11,"children":12,"toc":637},"root",[13,21,34,41,46,51,285,300,310,316,449,454,459,465,479],{"type":14,"tag":15,"props":16,"children":18},"element","h1",{"id":17},"storage-providers-and-sub-processors",[19],{"type":20,"value":8},"text",{"type":14,"tag":22,"props":23,"children":24},"p",{},[25,27],{"type":20,"value":26},"Last updated: 21 October 2026 · To be notified of changes, email ",{"type":14,"tag":28,"props":29,"children":31},"a",{"href":30},"mailto:contact@ironshard.ai",[32],{"type":20,"value":33},"contact@ironshard.ai",{"type":14,"tag":35,"props":36,"children":38},"h2",{"id":37},"storage-providers",[39],{"type":20,"value":40},"Storage providers",{"type":14,"tag":22,"props":42,"children":43},{},[44],{"type":20,"value":45},"Coded fragments are distributed across multiple independent storage providers. As explained in our Privacy Policy, fragments held by an individual provider do not constitute personal data, and these providers are not sub-processors.",{"type":14,"tag":22,"props":47,"children":48},{},[49],{"type":20,"value":50},"We use the following providers:",{"type":14,"tag":52,"props":53,"children":54},"table",{},[55,79],{"type":14,"tag":56,"props":57,"children":58},"thead",{},[59],{"type":14,"tag":60,"props":61,"children":62},"tr",{},[63,69,74],{"type":14,"tag":64,"props":65,"children":66},"th",{},[67],{"type":20,"value":68},"Group",{"type":14,"tag":64,"props":70,"children":71},{},[72],{"type":20,"value":73},"Provider",{"type":14,"tag":64,"props":75,"children":76},{},[77],{"type":20,"value":78},"Headquarters",{"type":14,"tag":80,"props":81,"children":82},"tbody",{},[83,102,118,134,150,168,185,202,219,236,252,269],{"type":14,"tag":60,"props":84,"children":85},{},[86,92,97],{"type":14,"tag":87,"props":88,"children":89},"td",{},[90],{"type":20,"value":91},"Global cloud platforms",{"type":14,"tag":87,"props":93,"children":94},{},[95],{"type":20,"value":96},"Amazon Web Services",{"type":14,"tag":87,"props":98,"children":99},{},[100],{"type":20,"value":101},"United States",{"type":14,"tag":60,"props":103,"children":104},{},[105,109,114],{"type":14,"tag":87,"props":106,"children":107},{},[108],{"type":20,"value":91},{"type":14,"tag":87,"props":110,"children":111},{},[112],{"type":20,"value":113},"Google Cloud",{"type":14,"tag":87,"props":115,"children":116},{},[117],{"type":20,"value":101},{"type":14,"tag":60,"props":119,"children":120},{},[121,125,130],{"type":14,"tag":87,"props":122,"children":123},{},[124],{"type":20,"value":91},{"type":14,"tag":87,"props":126,"children":127},{},[128],{"type":20,"value":129},"Microsoft Azure",{"type":14,"tag":87,"props":131,"children":132},{},[133],{"type":20,"value":101},{"type":14,"tag":60,"props":135,"children":136},{},[137,141,146],{"type":14,"tag":87,"props":138,"children":139},{},[140],{"type":20,"value":91},{"type":14,"tag":87,"props":142,"children":143},{},[144],{"type":20,"value":145},"IBM Cloud",{"type":14,"tag":87,"props":147,"children":148},{},[149],{"type":20,"value":101},{"type":14,"tag":60,"props":151,"children":152},{},[153,158,163],{"type":14,"tag":87,"props":154,"children":155},{},[156],{"type":20,"value":157},"European cloud providers",{"type":14,"tag":87,"props":159,"children":160},{},[161],{"type":20,"value":162},"OVHcloud",{"type":14,"tag":87,"props":164,"children":165},{},[166],{"type":20,"value":167},"France",{"type":14,"tag":60,"props":169,"children":170},{},[171,175,180],{"type":14,"tag":87,"props":172,"children":173},{},[174],{"type":20,"value":157},{"type":14,"tag":87,"props":176,"children":177},{},[178],{"type":20,"value":179},"Exoscale",{"type":14,"tag":87,"props":181,"children":182},{},[183],{"type":20,"value":184},"Switzerland",{"type":14,"tag":60,"props":186,"children":187},{},[188,192,197],{"type":14,"tag":87,"props":189,"children":190},{},[191],{"type":20,"value":157},{"type":14,"tag":87,"props":193,"children":194},{},[195],{"type":20,"value":196},"Hetzner",{"type":14,"tag":87,"props":198,"children":199},{},[200],{"type":20,"value":201},"Germany",{"type":14,"tag":60,"props":203,"children":204},{},[205,209,214],{"type":14,"tag":87,"props":206,"children":207},{},[208],{"type":20,"value":157},{"type":14,"tag":87,"props":210,"children":211},{},[212],{"type":20,"value":213},"ScanNet",{"type":14,"tag":87,"props":215,"children":216},{},[217],{"type":20,"value":218},"Denmark",{"type":14,"tag":60,"props":220,"children":221},{},[222,227,232],{"type":14,"tag":87,"props":223,"children":224},{},[225],{"type":20,"value":226},"Developer cloud providers",{"type":14,"tag":87,"props":228,"children":229},{},[230],{"type":20,"value":231},"DigitalOcean",{"type":14,"tag":87,"props":233,"children":234},{},[235],{"type":20,"value":101},{"type":14,"tag":60,"props":237,"children":238},{},[239,243,248],{"type":14,"tag":87,"props":240,"children":241},{},[242],{"type":20,"value":226},{"type":14,"tag":87,"props":244,"children":245},{},[246],{"type":20,"value":247},"Akamai (Linode)",{"type":14,"tag":87,"props":249,"children":250},{},[251],{"type":20,"value":101},{"type":14,"tag":60,"props":253,"children":254},{},[255,260,265],{"type":14,"tag":87,"props":256,"children":257},{},[258],{"type":20,"value":259},"Specialist object-storage and edge providers",{"type":14,"tag":87,"props":261,"children":262},{},[263],{"type":20,"value":264},"Tigris",{"type":14,"tag":87,"props":266,"children":267},{},[268],{"type":20,"value":101},{"type":14,"tag":60,"props":270,"children":271},{},[272,276,281],{"type":14,"tag":87,"props":273,"children":274},{},[275],{"type":20,"value":259},{"type":14,"tag":87,"props":277,"children":278},{},[279],{"type":20,"value":280},"Cloudflare",{"type":14,"tag":87,"props":282,"children":283},{},[284],{"type":20,"value":101},{"type":14,"tag":22,"props":286,"children":287},{},[288,290,298],{"type":20,"value":289},"Each provider's certifications and audit reports are listed in our ",{"type":14,"tag":28,"props":291,"children":295},{"href":292,"rel":293},"https://ironshard.ai/trust-center",[294],"nofollow",[296],{"type":20,"value":297},"Trust Center",{"type":20,"value":299},".",{"type":14,"tag":22,"props":301,"children":302},{},[303,305,309],{"type":20,"value":304},"Which providers and locations hold your fragments depends on the locations you select. Region Select is available on every plan, including the free tier: you choose from the locations offered to you, and your fragments are stored only with providers in those locations. The locations in use for your buckets are available to customers on request at ",{"type":14,"tag":28,"props":306,"children":307},{"href":30},[308],{"type":20,"value":33},{"type":20,"value":299},{"type":14,"tag":35,"props":311,"children":313},{"id":312},"sub-processors",[314],{"type":20,"value":315},"Sub-processors",{"type":14,"tag":52,"props":317,"children":318},{},[319,340],{"type":14,"tag":56,"props":320,"children":321},{},[322],{"type":14,"tag":60,"props":323,"children":324},{},[325,330,335],{"type":14,"tag":64,"props":326,"children":327},{},[328],{"type":20,"value":329},"Sub-processor",{"type":14,"tag":64,"props":331,"children":332},{},[333],{"type":20,"value":334},"Purpose",{"type":14,"tag":64,"props":336,"children":337},{},[338],{"type":20,"value":339},"Location",{"type":14,"tag":80,"props":341,"children":342},{},[343,361,379,396,414,432],{"type":14,"tag":60,"props":344,"children":345},{},[346,351,356],{"type":14,"tag":87,"props":347,"children":348},{},[349],{"type":20,"value":350},"Fly.io",{"type":14,"tag":87,"props":352,"children":353},{},[354],{"type":20,"value":355},"Gateway processing",{"type":14,"tag":87,"props":357,"children":358},{},[359],{"type":20,"value":360},"Amsterdam (Netherlands), Frankfurt (Germany), Stockholm (Sweden), London (United Kingdom), Toronto (Canada), Ashburn, Chicago and Los Angeles (United States)",{"type":14,"tag":60,"props":362,"children":363},{},[364,369,374],{"type":14,"tag":87,"props":365,"children":366},{},[367],{"type":20,"value":368},"Google Cloud Platform",{"type":14,"tag":87,"props":370,"children":371},{},[372],{"type":20,"value":373},"Control plane, key storage, logging and monitoring",{"type":14,"tag":87,"props":375,"children":376},{},[377],{"type":20,"value":378},"Frankfurt, Germany",{"type":14,"tag":60,"props":380,"children":381},{},[382,386,391],{"type":14,"tag":87,"props":383,"children":384},{},[385],{"type":20,"value":280},{"type":14,"tag":87,"props":387,"children":388},{},[389],{"type":20,"value":390},"Website hosting and DNS",{"type":14,"tag":87,"props":392,"children":393},{},[394],{"type":20,"value":395},"Global network; processed nearest the visitor",{"type":14,"tag":60,"props":397,"children":398},{},[399,404,409],{"type":14,"tag":87,"props":400,"children":401},{},[402],{"type":20,"value":403},"Sentry",{"type":14,"tag":87,"props":405,"children":406},{},[407],{"type":20,"value":408},"Error monitoring and session replay (gateways and web applications)",{"type":14,"tag":87,"props":410,"children":411},{},[412],{"type":20,"value":413},"Frankfurt, Germany (Sentry's EU data region). Sentry is a US company, so its staff may access the data from the United States.",{"type":14,"tag":60,"props":415,"children":416},{},[417,422,427],{"type":14,"tag":87,"props":418,"children":419},{},[420],{"type":20,"value":421},"Mailgun",{"type":14,"tag":87,"props":423,"children":424},{},[425],{"type":20,"value":426},"Service communications",{"type":14,"tag":87,"props":428,"children":429},{},[430],{"type":20,"value":431},"EU region",{"type":14,"tag":60,"props":433,"children":434},{},[435,440,445],{"type":14,"tag":87,"props":436,"children":437},{},[438],{"type":20,"value":439},"InfluxData",{"type":14,"tag":87,"props":441,"children":442},{},[443],{"type":20,"value":444},"Operational metrics",{"type":14,"tag":87,"props":446,"children":447},{},[448],{"type":20,"value":378},{"type":14,"tag":22,"props":450,"children":451},{},[452],{"type":20,"value":453},"Google Cloud Platform and Cloudflare also act as storage providers, as described above.",{"type":14,"tag":22,"props":455,"children":456},{},[457],{"type":20,"value":458},"We give 30 days' notice before adding or replacing a sub-processor.",{"type":14,"tag":35,"props":460,"children":462},{"id":461},"security-and-compliance-information",[463],{"type":20,"value":464},"Security and compliance information",{"type":14,"tag":22,"props":466,"children":467},{},[468,470,477],{"type":20,"value":469},"Each sub-processor publishes its own certifications and audit reports. We rely on them and provide them to customers on request (see clause C.8 of the ",{"type":14,"tag":28,"props":471,"children":474},{"href":472,"rel":473},"https://ironshard.ai/legal/dpa",[294],[475],{"type":20,"value":476},"Data Processing Agreement",{"type":20,"value":478},").",{"type":14,"tag":52,"props":480,"children":481},{},[482,497],{"type":14,"tag":56,"props":483,"children":484},{},[485],{"type":14,"tag":60,"props":486,"children":487},{},[488,492],{"type":14,"tag":64,"props":489,"children":490},{},[491],{"type":20,"value":329},{"type":14,"tag":64,"props":493,"children":494},{},[495],{"type":20,"value":496},"Published information",{"type":14,"tag":80,"props":498,"children":499},{},[500,519,563,582,601,620],{"type":14,"tag":60,"props":501,"children":502},{},[503,507],{"type":14,"tag":87,"props":504,"children":505},{},[506],{"type":20,"value":350},{"type":14,"tag":87,"props":508,"children":509},{},[510,517],{"type":14,"tag":28,"props":511,"children":514},{"href":512,"rel":513},"https://fly.io/compliance",[294],[515],{"type":20,"value":516},"Compliance",{"type":20,"value":518},": SOC 2 Type 2 audited; infrastructure in ISO 27001 data centres. SOC 2 report available from Fly.io.",{"type":14,"tag":60,"props":520,"children":521},{},[522,526],{"type":14,"tag":87,"props":523,"children":524},{},[525],{"type":20,"value":368},{"type":14,"tag":87,"props":527,"children":528},{},[529,536,538,545,547,554,556],{"type":14,"tag":28,"props":530,"children":533},{"href":531,"rel":532},"https://cloud.google.com/compliance",[294],[534],{"type":20,"value":535},"Compliance resource center",{"type":20,"value":537},", including ",{"type":14,"tag":28,"props":539,"children":542},{"href":540,"rel":541},"https://cloud.google.com/security/compliance/iso-27001",[294],[543],{"type":20,"value":544},"ISO/IEC 27001",{"type":20,"value":546},", ",{"type":14,"tag":28,"props":548,"children":551},{"href":549,"rel":550},"https://cloud.google.com/security/compliance/soc-2",[294],[552],{"type":20,"value":553},"SOC 2",{"type":20,"value":555}," and the ",{"type":14,"tag":28,"props":557,"children":560},{"href":558,"rel":559},"https://cloud.google.com/security/compliance/compliance-reports-manager",[294],[561],{"type":20,"value":562},"Compliance Reports Manager",{"type":14,"tag":60,"props":564,"children":565},{},[566,570],{"type":14,"tag":87,"props":567,"children":568},{},[569],{"type":20,"value":280},{"type":14,"tag":87,"props":571,"children":572},{},[573,580],{"type":14,"tag":28,"props":574,"children":577},{"href":575,"rel":576},"https://www.cloudflare.com/trust-hub/compliance-resources/",[294],[578],{"type":20,"value":579},"Trust Hub: compliance resources",{"type":20,"value":581},". Compliance documents are available through Cloudflare's dashboard.",{"type":14,"tag":60,"props":583,"children":584},{},[585,589],{"type":14,"tag":87,"props":586,"children":587},{},[588],{"type":20,"value":403},{"type":14,"tag":87,"props":590,"children":591},{},[592,599],{"type":14,"tag":28,"props":593,"children":596},{"href":594,"rel":595},"https://sentry.io/trust/",[294],[597],{"type":20,"value":598},"Trust",{"type":20,"value":600},": SOC 2 Type 2 report and ISO 27001 certificate",{"type":14,"tag":60,"props":602,"children":603},{},[604,608],{"type":14,"tag":87,"props":605,"children":606},{},[607],{"type":20,"value":439},{"type":14,"tag":87,"props":609,"children":610},{},[611,618],{"type":14,"tag":28,"props":612,"children":615},{"href":613,"rel":614},"https://influxdata.com/security/",[294],[616],{"type":20,"value":617},"Security",{"type":20,"value":619},": SOC 2 Type 2 and ISO 27001",{"type":14,"tag":60,"props":621,"children":622},{},[623,627],{"type":14,"tag":87,"props":624,"children":625},{},[626],{"type":20,"value":421},{"type":14,"tag":87,"props":628,"children":629},{},[630],{"type":14,"tag":28,"props":631,"children":634},{"href":632,"rel":633},"https://www.mailgun.com/legal/security/",[294],[635],{"type":20,"value":636},"Mailgun security and compliance",{"title":7,"searchDepth":638,"depth":638,"links":639},2,[640,641,642],{"id":37,"depth":638,"text":40},{"id":312,"depth":638,"text":315},{"id":461,"depth":638,"text":464},"markdown","content:pages:legal:sub-processors.md","content","pages/legal/sub-processors.md","pages/legal/sub-processors","md",[],1792661476012]