Last updated: 2 October 2026
These are the providers that process data on our behalf to run FR^NK. We tell subscribers at least 30 days before we add or replace one, and customers can object under our Data Processing Agreement.
Platform sub-processors
|
Provider |
Purpose |
Data it receives |
Location |
Transfer mechanism |
|
Railway Corp |
Application hosting, database and object storage |
All customer data held by the platform |
Netherlands. Support staff access from the US |
Provider DPA with SCCs, UK Addendum and IDTA |
|
Tigris Data |
Object storage infrastructure beneath Railway. Contracted through Railway |
Generated files and encrypted backups |
Amsterdam |
SCCs and UK Addendum via Railway |
|
Resend |
Transactional and notification email |
Recipient email, name, message body |
United States |
Provider DPA with SCCs. Data Privacy Framework with UK Extension |
|
Google LLC (Gemini API) |
Generation and analysis for AI features |
Website text, findings, keywords. No account data |
United States |
Google processor terms |
|
DataForSEO OU |
Search, SERP, review and answer engine data |
Domains, keywords, locations, business names, prompts |
United States (entity in Estonia) |
SCCs or adequacy |
|
OpenAI and Perplexity |
Answering prompts purchased through DataForSEO. We hold no account with either |
Prompts only |
Per DataForSEO |
Flow-down through DataForSEO |
|
ScraperAPI |
Fetching third-party pages |
A target URL only |
United States |
Provider terms |
|
Firecrawl |
Content and cadence reads on third-party sites |
A target URL only |
United States |
Provider terms |
|
Google LLC (PageSpeed Insights) |
Performance measurement |
A URL |
United States |
Google processor terms |
|
Google LLC (Places) |
Business and location lookups |
URL, business name, coordinates |
United States |
Google processor terms |
|
Stripe |
Payment for plans and subscription billing |
Name, email, company name, billing address, tax ID if given, card details, the websites and plan chosen |
United States (Stripe, LLC) |
Provider DPA with the UK International Data Transfer Addendum. Data Privacy Framework with UK Extension |
Marketing site only
Google Analytics 4 runs on frank.online after cookie consent. It does not touch customer workspace data and is described in our Cookie Policy. CookieYes provides the consent banner and stores your cookie choices.
Payment
Stripe takes payment for plans. Card details go directly to Stripe and never pass through our systems.
Subscribe to changes
To be told when this list changes, email [email protected] with the subject line "Sub-processor updates".