Sub-processors
Every supplier that processes data on Ferrith's behalf, what it does, where it runs, and what it can see. Workspace content is processed on infrastructure Ferrith operates in the United Kingdom.
| Provider | Role | Location | What it sees | Notes |
|---|---|---|---|---|
| Civo Ltd Cloud infrastructure |
Runs the whole platform, compute, storage, the AI inference servers, and Ferrith's own key vault and identity service | United Kingdom (London) | Workspace data encrypted at rest, and content in memory at the moment the AI processes a request. Nothing leaves the region. | The only infrastructure supplier. UK-owned. |
| Microsoft (Azure Communication Services) Email delivery |
Delivers sign-in, invitation and password-reset emails | Data-residency UK/EU region | A member's email address and the message itself, no workspace content, no keys | Added to the published list on 2026-08-21. |
| Stripe Billing and payments |
Processes subscription payments for the account portal | Global (US-owned) | Billing details, name, email, card, billing address. No workspace content. |
Not on this listIdentity (Zitadel) and key management (OpenBao) are open-source software Ferrith runs inside its own UK deployment. There is no third-party identity or key service, so neither appears above. Cloudflare provides DNS for ferrith.ai and nothing more, it is not in the production traffic path and never sees traffic or content, so it is treated as network infrastructure rather than a sub-processor. Under BYOK, your encryption key lives in a vault you choose and control. If your organisation later opts into signing in with its own identity provider, that sign-in handshake goes to the provider you chose. Model weights are downloaded from Hugging Face when our AI servers start and no personal data is involved.
Changes to this list
We publish any addition or replacement here at least 30 days before it takes effect, and the change feed carries the same notice — subscribe to it to be told automatically.
- 2026-08-26 v1 First publication. Civo (infrastructure, United Kingdom), Microsoft Azure Communication Services (sign-in email delivery), and Stripe (billing), mirroring the processing register as of this date.