Formwire
Current list
| Name | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting and network, databases, file storage, delivery queues, rate limiting, sign-in sessions for connected apps, bot checks on sign-in and captcha checks on forms that use it (Turnstile), nightly backups, forwarding mail sent to our support addresses, and cookie-free page counts on formwire.com | Stored in the United States, or the European Union for the submissions, files and backups of EU workspaces; requests are handled at the Cloudflare location nearest the visitor |
| Amazon Web Services, Inc. | Sending submission notifications and confirmation emails (SES) | United States (us-east-1) |
| Resend, Inc. | Sending account email: sign-in codes, invitations and notices about your account | United States |
| Intuition Machines, Inc. (hCaptcha) | Captcha checks, only on forms that use hCaptcha | United States |
| Paddle.com Market Limited | Payments, invoices and sales tax for paid plans, as our reseller | United Kingdom |
| Google LLC | Sign in with Google: your email and name, only if you choose it; and reCAPTCHA checks, only on forms that use reCAPTCHA | United States |
| GitHub, Inc. | Sign in with GitHub: your email and name, only if you choose it | United States |
What each one sees
- Cloudflare holds everything: it is where the service runs and where accounts and forms are stored, and it stores submissions, their files and the nightly backups in the region chosen for their workspace, the United States or the European Union. It also runs the Turnstile captcha on forms that use it and forwards mail sent to our support addresses.
- Amazon Web Services sees the content of each submission notification and confirmation email, which includes the submission.
- Resend sees the account email we send you, such as sign-in codes and invitations. It never sees submissions.
- Paddle sees the billing details of customers on paid plans: name, email, billing address and card. It never sees submissions.
- hCaptcha and Google reCAPTCHA see the visitor's IP address and captcha answer when a form uses them. They never see the submitted fields.
- Google and GitHub see that you signed in to Formwire and share your profile with us. They never see submissions.
Services you connect
When you point a form at a webhook or connect Slack, Discord or Telegram, we send each submission to that destination because you asked us to. Those services are your choice and work for you, not for us, so they are not on this list. Turning off the webhook or integration stops the sending.
Changes to this list
Before we add or replace a subprocessor we update this page and email account owners at least 30 days in advance, as the DPA requires. If you would rather get these notices at a different address, tell support@formwire.com.