When you use FlexiFlow for your invoices, customers and expenses, you are the controller of that data and we are your processor. To provide the service we rely on other companies (sub-processors) that process data on our behalf. This is the current list.
| Provider | Purpose | Country | Safeguard for the data |
|---|---|---|---|
| Contabo | Hosting of the server that runs the platform, the invoice reader, the databases and the files. | European Union (exact country and data centre) | Processing inside the European Economic Area; processing agreement with the provider |
| Stripe | Card payments for subscriptions and top-ups. You enter card details at Stripe, not on this site. | Ireland (EU), with possible access from the US | Standard contractual clauses or the EU-US data privacy framework |
| [EMAIL PROVIDER — PENDIENTE] | Sending service email: account verification, password recovery, security notices, and the invoices and reminders each user sends. | [COUNTRY — PENDIENTE] | |
| Anthropic Only if “Allow AI” is turned on for the customer |
AI invoice reading (optional second pass): images of the invoice pages are sent. Only if the customer turns it on. | United States | International transfer: standard contractual clauses or another valid safeguard; retention and no-training terms to be checked in their current terms |
| [BACKUP PROVIDER — PENDIENTE] | Storage of encrypted backups outside the server. The provider only sees encrypted files. | [COUNTRY — PENDIENTE] |
AI invoice reading is optional and off by default. An invoice is only sent to the AI provider if the responsible person turns on "Allow AI" for that customer in the invoice reader. Images of the invoice pages are sent, which may contain personal data. Each sending is logged with the tokens used. This is an international transfer (United States): see the Privacy policy. If you prefer your invoices not to leave the European Union, do not turn on "Allow AI".
If we add or replace a sub-processor, we will update this page (new version and date) and email the firms and businesses that have signed the data processing agreement, in time for them to object.
| Version | Date | Change |
|---|---|---|
| 0.1 | 2026-11-05 | Initial list (draft). |
Contact: [PRIVACY EMAIL — PENDIENTE].