Sub-processors
Flinq Copilot Agent — Last updated: June 17, 2026
1. What is a Sub-processor?
A sub-processor is any third party engaged by Flinq Ltd to process personal data on our behalf while providing the Flinq Copilot Agent service. We maintain this page as required by Article 28 of the UK GDPR and equivalent provisions under the EU GDPR so you can review the third parties that may handle your data.
2. Current Sub-processors
The table below lists the sub-processors we currently engage. Your own Flinq instance may use additional sub-processors specific to your deployment; those are listed in your instance-specific Data Processing Agreement (DPA).
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
|
Microsoft Corporation Trust Center |
Delivery of the Microsoft 365 Copilot chat experience and Agent hosting. | User prompts, Copilot responses, authentication identifiers (Entra ID / UPN). | EU / UK / US (per customer tenant region) |
|
DigitalOcean, LLC GDPR & Trust |
Hosting of the Flinq gateway (app.flinq.io) and client Flinq instances. |
Encrypted authentication tokens, basic profile (name, email, workspace), financial records on client instance. | London, United Kingdom (LON1) |
|
Functional Software, Inc. (Sentry) Trust & Security |
Application error monitoring and aggregated performance telemetry. | Stack traces, request metadata (URL, HTTP status), user identifier (hashed). No financial data is sent. | European Union (Frankfurt region) |
|
Postmark (ActiveCampaign, LLC) GDPR & DPA |
Transactional email delivery (password reset, account notifications, support replies). | Recipient email address, sender identity, email content. | United States |
|
Laravel Forge (Laravel, LLC) Privacy Policy |
Server provisioning, configuration management, and deployment tooling. | Server metadata only; no end-user personal or financial data. | United States (control plane) / workloads remain in UK |
3. International Transfers
Where sub-processors are located outside the UK/EEA, transfers are governed by the UK International Data Transfer Addendum (IDTA) and the EU Standard Contractual Clauses (SCCs), supplemented by the technical and organisational measures described in our Data Processing Agreement.
4. Changes to Sub-processors
We will update this page before engaging a new sub-processor or replacing an existing one. Customers who have signed a Data Processing Agreement with Flinq will additionally receive notification by email at least thirty (30) days before the change takes effect, providing an opportunity to object.
5. Contact & Questions
To request a Data Processing Agreement (DPA), object to a new sub-processor, or ask any privacy-related question:
Flinq Ltd — Data Protection Team
Email: data@flinq.io (monitored)
General support: support@flinq.io
Website: flinq.io
See also: Privacy Policy · Terms of Use