Subprocessors

Filently uses third-party service providers (“subprocessors”) to help deliver and operate our service. A subprocessor is a third-party data processor engaged by Filently who has or may have access to personal data of our users.

This page provides transparency about which subprocessors we use, what data they process, and where that processing takes place.

Document Data

Some subprocessors have access to the content of your uploaded documents or text extracted from them. This is indicated by the Document Data column below. Subprocessors marked with “No” only process operational data such as account information, usage metrics, or technical metadata — never the content of your documents.

Subprocessors

* Railway hosts the application servers where documents are processed in-transit (OCR, classification, filing). Document data passes through Railway’s infrastructure but is not stored there. Lettermint’s document data access applies to the email forwarding feature only, where it processes inbound email attachments. Transactional emails sent through Lettermint do not involve document data.

User-Chosen Storage Providers

Filently processes all documents within the EU and Switzerland. The final storage destination is chosen by you when connecting your cloud drive account. Filently does not control where your cloud storage provider stores data.

Additional storage providers will be listed here as they become available.

Data Processing Locations

Filently is committed to processing data within the EU and Switzerland wherever possible. The majority of our subprocessors operate within the EU/EEA or Switzerland.

• 🇨🇭 CH / 🇪🇺 EU — All document content processing (OCR and AI classification) takes place exclusively in Switzerland and the EU.
• 🇬🇧 UK — The UK benefits from an EU adequacy decision, meaning data transfers to the UK are treated equivalently to intra-EU transfers under GDPR.
• 🇺🇸 US — Google OAuth is the only core subprocessor processing data in the US. This is limited to authentication data (name, email address, profile picture). No document data is transferred to the US.
• 🌐 Global — Cloudflare operates a global CDN network. Requests are served from the nearest edge location to optimize performance. No document data is processed by Cloudflare.

International Data Transfers

Where personal data is transferred outside of the EU/EEA or Switzerland, we ensure appropriate safeguards are in place in accordance with GDPR (Chapter V). These safeguards include:

• Adequacy decisions — Transfers to countries or territories recognised by the European Commission as providing an adequate level of data protection (e.g., the UK, Switzerland).
• Standard Contractual Clauses (SCCs) — For transfers to countries without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses as the legal basis for the transfer.
• Supplementary measures — Where necessary, we implement additional technical and organisational measures, such as encryption in transit and at rest, to ensure an equivalent level of data protection.

Changes to This List

We may update the list of subprocessors from time to time as our service evolves. We encourage you to review this page periodically to stay informed.

If you have questions about our subprocessors or data processing practices, please contact us at support@filently.com .

Last updated: February 27, 2025