Legal

Sub-processors

Last updated 14 September 2026

RFxFlow uses the following providers to operate the service. Each processes data only as needed for the listed purpose.

Infrastructure and data

  • Supabase — database, authentication, and file storage. Region: EU (Frankfurt).
  • Vercel — application hosting and cron jobs. Primary region: Frankfurt (fra1).

Communications and payments

  • Postmark (ActiveCampaign) — transactional email delivery and inbound parsing.
  • Stripe — subscription billing and invoices.

AI

  • OpenAI — document extraction, gap analysis, scoring, and writing assistance when the organisation has an AI plan. Prompts include customer-selected tender text.

Questions: privacy@rfxflow.io.

Back to RFxFlow