Sub-processors
Last Updated: September 12, 2026
ByRequest uses the third-party sub-processors listed below to provide the Services. Each processes personal data only as needed for what we have engaged it to do, and is subject to a data processing agreement with obligations consistent with our Privacy Policy.
Current sub-processors
| Sub-processor | What it does for us | Processing location |
|---|---|---|
| Cloudflare, Inc. | Hosting, application runtime, database, file storage, job queues, DNS, and bot protection on sign-in and guest forms. All board content and account data is stored here. | Global edge network |
| Functional Software, Inc. (Sentry) | Error monitoring. Receives diagnostic data when something fails, which can include a URL, an account identifier, and the contents of an error. | United States |
| Automattic Inc. (Gravatar) | Profile images. Receives a SHA-256 hash of an email address when an avatar is requested — never the address itself. | United States |
Email delivery
Notification and sign-in email is sent through one of the following, depending on configuration:
| Sub-processor | What it does for us | Processing location |
|---|---|---|
| The provider configured for the platform mailer | Delivers email for boards that use our built-in sending. Receives recipient name, email address, and message content. | Varies by provider |
A Team may instead connect their own email provider — Postmark, Resend, Amazon SES, or Cloudflare — in which case email for that board is sent through the Team's own account. That provider is the Team's sub-processor, not ours, and their agreement with it governs that processing.
Notes
"Processing location" refers to the region where the sub-processor stores and processes personal data on our behalf. Where personal data is transferred outside the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including Standard Contractual Clauses.
We may update this list as the Services evolve. The "Last Updated" date above reflects the most recent change. To be notified of changes, contact us at support@byrequest.app.
We give at least 30 days' notice before adding or replacing a sub-processor. If you have a reasonable, data-protection-based objection to a new sub-processor, tell us within 30 days and we will work with you in good faith to address it.