Legal
Sub-processors
Last updated 14 September 2026
RFxFlow uses the following providers to operate the service. Each processes data only as needed for the listed purpose.
Infrastructure and data
- Supabase — database, authentication, and file storage. Region: EU (Frankfurt).
- Vercel — application hosting and cron jobs. Primary region: Frankfurt (fra1).
Communications and payments
- Postmark (ActiveCampaign) — transactional email delivery and inbound parsing.
- Stripe — subscription billing and invoices.
AI
- OpenAI — document extraction, gap analysis, scoring, and writing assistance when the organisation has an AI plan. Prompts include customer-selected tender text.
Questions: privacy@rfxflow.io.