Skip to content

Subprocessors

The companies that process personal data for us, what each one handles, and where.

Last updated 22 October 2026

FormatJet runs on these services. Each processes data only to provide its service to us, under its data processing terms with us, apart from Stripe’s own use of payment data (below). Files you convert in your browser never reach any of them.

Current subprocessors

  • Cloudflare

    Cloudflare, Inc.

    What it does
    Hosts the website, dashboard and API. Stores the files you convert on our servers and runs the conversion engines. Keeps accounts, conversion history and credits. Counts usage and page views, checks for bots (Turnstile), and receives, stores and sends our email (our mailbox for support@ and hello@).
    Data
    Files converted on our servers, account details, conversion and credit records, anonymous usage statistics, request logs, and email you send us.
    Where
    Files are stored and converted in the United States (eastern North America), and accounts, conversion history and the credit ledger are stored there too. Our mailbox is stored in the Asia-Pacific region. Requests are handled in the Cloudflare data centre nearest you, which may also keep a conversion’s progress while it runs and your account’s running totals (daily count, credit balance).

  • Stripe (Link)

    Stripe, Inc. and its affiliates

    What it does
    Sells Pro and credit packs as the merchant of record: takes payments, collects tax, sends receipts and invoices, and handles payment questions and refunds.
    Data
    The email address and organisation ID we send when you start a checkout. Stripe collects your payment details itself; we never see them.
    Where
    The United States and other countries where Stripe operates.

  • Resend

    Plus Five Five, Inc.

    What it does
    Sends sign-in emails, and passes contact-form messages to our mailbox.
    Data
    Your email address and the email: a sign-in link, or your contact-form message with your name and address. Resend keeps it 30 days.
    Where
    The United States.

  • Sentry

    Functional Software, Inc.

    What it does
    Receives error reports so we can fix what breaks.
    Data
    Error reports, with file names, query strings, cookies, request headers and user details removed before they’re sent. Sentry drops IP addresses on arrival.
    Where
    The United States.

Stripe’s own role

For payments, Stripe is more than our processor: as the merchant of record it decides how it uses the data you give it at checkout, under Link’s terms and Stripe’s privacy policy. We list it here because we send it your email address and organisation ID.

Changes

Before a new subprocessor starts handling personal data, we add it to this page and change the date at the top. If it will handle files you convert or your account’s data, we also email account holders at least 30 days before. Organisations under our data processing agreement can object, as it describes.

Questions: hello@formatjet.com.