FieldScroll (Thirtysix Solutions, LLC) uses the services below to run the platform. Each one is bound by a data processing agreement or equivalent terms and receives only the data listed. This page is Attachment 2 to the Data Processing Addendum; changes follow the notice process in DPA Section 6.
| Subprocessor | Location | Purpose | Data processed | Processing region | Terms |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. | 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 | Database, authentication, file storage, serverless functions, secrets vault | All Customer Data and account data | AWS US East | https://supabase.com/legal/dpa |
| Vercel Inc. | Delaware; 440 N Barranca Ave #4133, Covina, CA 91723 | Web dashboard and API hosting | All dashboard and API traffic including record content, IP addresses | United States | https://vercel.com/legal/dpa |
| Fly.io, Inc. | 2261 Market Street #4990, San Francisco, CA 94114 | Document rendering (PDF/HTML from records) and managed data connectors | Full record content and images for rendering; record payloads and destination credentials for connectors | Ashburn, Virginia | https://fly.io/legal/data-privacy-framework/ |
| Anthropic, PBC | San Francisco, CA | AI assistant for form, report, and integration authoring (off unless enabled in the Order Form) | User messages, form and report definitions, user-attached images; not used for training; deleted within 30 days | United States | https://www.anthropic.com/legal/data-processing-addendum |
| Sinch Email (Mailgun), a business unit of Sinch AB | Lindhagensgatan 74, 112 18 Stockholm, Sweden | Transactional email (sign-in, invitations, report deliveries) and website contact form | Email addresses, invitation content, rendered report attachments containing record content | United States sending region | https://www.mailgun.com/legal/dpa/ |
| Plus Five Five, Inc. (Resend) | 2261 Market Street #5039, San Francisco, CA 94114 | Alternate transactional email transport (not the default) | Same as above when selected | United States | https://resend.com/legal/dpa |
| Functional Software, Inc. (Sentry) | 45 Fremont Street, 8th Floor, San Francisco, CA 94105 | Error monitoring for the web application and server functions (not the mobile application) | Stack traces, request identifiers, organization identifiers; incidental payload fragments in error messages | United States | https://sentry.io/legal/dpa/ |
| Better Stack, Inc. | United States | Log management, uptime monitoring, and alerting for web, mobile, server functions, and database | Structured logs: user and organization identifiers, routes, error text, mobile device platform and app version | United States | https://betterstack.com/dpa |
| PostHog, Inc. | 2261 Market St. #4008, San Francisco, CA 94114 | Product analytics for web, website, and mobile application (session replay disabled) | Event names with user, organization, form, and record identifiers; IP address; device and browser metadata; no record contents | United States | https://posthog.com/dpa |
| Mapbox, Inc. | San Francisco, CA | Map display for location fields in the mobile application | Device IP address and map viewport when a location field renders a map | United States | https://www.mapbox.com/legal/dpa |
| Cloudflare, Inc. | 101 Townsend Street, San Francisco, CA 94107 | Bot protection on the website contact form | Visitor IP address and challenge token; no Customer Data | United States | https://www.cloudflare.com/cloudflare-customer-dpa/ |
| Apple Inc. / Google LLC | Cupertino, CA / Mountain View, CA | Mobile application distribution | Store account data and operating-system crash reports; no Customer Data from Provider | United States | Apple Developer Program License Agreement; Google Play Developer Distribution Agreement |
Not subprocessors
Destinations you configure yourself are not subprocessors: Salesforce, your own databases, webhook endpoints, and the email recipients of report deliveries. Build and source-control services that never see customer data: 650 Industries, Inc. (Expo/EAS) and GitHub, Inc.
Questions
Write to privacy@fieldscroll.com.