Subprocessors
To provide Launchfile, High Bridge Enterprises AB engages the third-party subprocessors below. Each processes data only as needed to provide its part of the service, under a data processing agreement (DPA). Data residency is controlled by region: customer deployments and their logs are kept in the region selected for that customer (EU or US).
Last updated: 27 June 2026
| Subprocessor | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|
| Cloudflare, Inc. | CDN, DNS, DDoS/WAF, edge compute (Workers), application database (D1) and object storage (R2). | Account and authentication data (name, email, organization), deployment records, and request metadata (IP address, approximate location, user-agent). | Global edge network; EU/US regions configurable per resource. | DPA |
| Hetzner Online GmbH | Cloud compute hosting the control plane and customers' deployed application containers and their databases. | Customers' deployed application data and content (whatever the customer's app stores). | EU (Germany / Finland) or US, selected per deployment region (data residency control). | DPA |
| Better Stack, s.r.o. | Log management and observability for the platform and customer deployments. | Application and infrastructure log events, which may contain personal data. | EU (Germany) by default, set per log source region (data residency control). | DPA |
| Stripe, Inc. (and Stripe Payments Europe, Ltd.) | Payment processing and subscription billing. | Billing contact details, subscription data, and payment information (card data is collected and processed directly by Stripe). | US / EU. | DPA |
| Google Ireland Limited (and Google LLC) | Authentication — “Sign in with Google” (OAuth). | When you sign in with Google: your name, email address, and basic profile information. | Global (EU/US). | DPA |
| Resend, Inc. | Transactional email delivery (e.g. magic-link sign-in emails). | Recipient email address and email message content. | US. | DPA |
| Anthropic, PBC | AI model (Claude) used to analyze a repository and generate deployment configuration when no Launchfile is present. | Repository contents and metadata submitted for analysis (may incidentally contain personal data present in the repository). Not used to train models under the commercial API terms. | US. | DPA |
| OpenRouter, Inc. | AI model gateway/routing for LLM features. | Prompts and content sent for AI processing (e.g. repository analysis). | US. | DPA |
Changes & notice
We may add or replace subprocessors as the service evolves. Where required by our agreements or applicable law, we will provide notice of material changes so customers can review them. For questions, contactprivacy@launchfile.io.
See also our Privacy Policyand Terms of Service.