Subprocessors
Last updated 17 October 2026
The service providers that process personal data for Slingdrop, what they do, and where. We'll update this page at least 30 days before adding a new subprocessor that handles customer content.
Infrastructure
Cloudflare, Inc. (United States, global network): hosting, file storage (R2), databases (D1), realtime (Durable Objects), queues, email delivery, bot protection (Turnstile), malware scanning containers, embeddings and fallback AI inference (Workers AI).
AI features
- OpenRouter, Inc. (United States): routes AI requests (summaries, answers, translation, tags, alt text, transcription) to model providers with data collection disabled, so prompts and files aren't stored or used for training.
- Model providers reached through OpenRouter: Google (Gemini models) and providers of OpenAI's Whisper speech-to-text model. They only receive content when a user uses an AI feature or a Pro/Team plan transcribes media. Vault drops are never sent.
Cloudflare Email Service (primary) and Resend, Inc. (United States, backup) deliver sign-in codes, notifications, invitations and digests.
Mobile apps
- Expo (650 Industries, Inc., United States) relays push notifications to Apple Push Notification service (Apple Inc.) and Firebase Cloud Messaging (Google LLC).
- Apple Inc. and Google LLC process in-app purchases and, if you choose them, Sign in with Apple and Google sign-in.
Safeguards
Each subprocessor is bound by a data processing agreement. Transfers outside the EU/EEA and the UK rely on the EU–US Data Privacy Framework where the provider is certified, and on standard contractual clauses otherwise.
Updates
To be told about changes, email support@slingdrop.my with the subject "Subprocessor updates".