fsckmsft will notify customers via email and status page update at least 30 days in advance of any addition, replacement, or removal of a material subprocessor. If you have objections to a new subprocessor, email legal@fsckmsft.org within the notice period.
Current subprocessors
Last updated: January 1, 2025| Subprocessor | Purpose | Location |
|---|---|---|
| AWS (Amazon Web Services) | Cloud infrastructure — compute, storage, networking, and database services that host the fsckmsft platform | US, EU, APAC |
| Stripe | Payment processing — securely handles subscription billing, card storage, and invoicing | US |
| SendGrid (Twilio) | Transactional email — delivers password resets, export notifications, workspace invitations, and system alerts | US |
| Datadog | Performance monitoring and observability — collects application metrics, logs, and error traces to ensure service reliability | US |
| Intercom | Customer support — powers the in-app help widget and manages support ticket conversations | US |
| Snowflake | Analytics data warehouse — stores aggregated, anonymised usage data used for product analytics and business intelligence | US |
Subprocessor details
AWS (Amazon Web Services)
AWS provides the foundational cloud infrastructure on which fsckmsft runs, including EC2 compute, S3 object storage, RDS databases, and CloudFront CDN. Data is stored in the region corresponding to your data residency selection —us-east-1 by default, eu-west-1 for EU residency customers, and ap-southeast-1 for APAC residency customers.
Data processing agreement: AWS Data Processing Addendum (aws.amazon.com/agreement)
Stripe
Stripe processes payment card data on behalf of fsckmsft for subscription billing. Stripe is PCI DSS Level 1 certified. fsckmsft never stores full card numbers — only tokenised references provided by Stripe. Data processing agreement: Stripe Data Processing Agreement (stripe.com/legal/dpa)SendGrid (Twilio)
SendGrid delivers all transactional system emails sent by fsckmsft, including account verification, password resets, export download links, and workspace invitation emails. Email addresses and names of recipients are shared with SendGrid solely for delivery purposes. Data processing agreement: Twilio Data Protection Addendum (twilio.com/legal/data-protection-addendum)Datadog
Datadog receives application performance metrics, structured logs, error traces, and infrastructure health data. fsckmsft implements data scrubbing rules to redact personal data from logs before transmission to Datadog. IP addresses are truncated and user identifiers are hashed. Data processing agreement: Datadog Data Processing Addendum (datadoghq.com/legal/data-processing-addendum)Intercom
Intercom powers the in-app help widget used for customer support conversations. When you start a chat or submit a support request, your name, email, and conversation content are transmitted to and stored in Intercom. Data processing agreement: Intercom Data Processing Agreement (intercom.com/legal/data-processing-agreement)Snowflake
Snowflake stores aggregated and anonymised analytics data derived from fsckmsft usage patterns. Raw personal data is not loaded into Snowflake — data is aggregated and de-identified before export from fsckmsft’s production environment. Data processing agreement: Snowflake Data Processing Addendum (snowflake.com/legal/data-processing-addendum)Change notification history
| Date | Change | Notice sent |
|---|---|---|
| January 1, 2025 | Initial subprocessors list published | — |