LEGAL
Sub-Processors
Effective date: April 2026
Last updated: April 2026
To operate the Wollow platform, Wollow Inc. engages a limited number of vetted vendors as Sub-Processors. Each Sub-Processor is bound by a written data protection agreement that imposes confidentiality, security, and use-limitation obligations consistent with the Privacy Policy and the Data Processing Addendum. This page is the canonical, publicly available list of those Sub-Processors.
Current Sub-Processors
| Sub-Processor | Function | Location |
|---|---|---|
| Hetzner Online GmbH | Cloud infrastructure hosting the dedicated per-Customer servers and the centralized control plane. | Germany / Finland (European Union). |
| Hostinger International Ltd. | Secondary cloud infrastructure used for regional deployments and the marketing website (wollow.ai) and dashboard application (app.wollow.ai). | Lithuania (European Union) / United States / other regions. |
| Supabase, Inc. | Account metadata database (Postgres), authentication, and per-Customer isolated project databases. | United States / European Union (region selected per project). |
| Stripe Payments Europe, Ltd. | Subscription billing, payment processing, tax calculation, and invoicing. | Ireland / United States. |
| Resend, Inc. | Transactional email delivery (account, billing, and security notifications). | United States. |
| Cloudflare, Inc. | DNS, edge TLS termination, DDoS protection, and web application firewall for public-facing endpoints. | Global edge network. |
AI Model Providers (BYOK)
AI model providers that Customers connect under the Bring Your Own Key model — including Anthropic PBC, OpenAI OpCo LLC, Google LLC, fal.ai, and Replicate, Inc. — are independent Controllers or Processors engaged directly by the Customer. They are not Wollow Sub-Processors. Their processing is governed by the agreement between the Customer and that provider. Wollow does not share Customer data with an AI model provider unless the Customer has configured credentials for that provider on their dedicated server.
Change Notifications
Wollow will provide Customer administrators with at least thirty (30) days' advance notice by email of the addition or replacement of a Sub-Processor that Processes Customer Personal Data. This page will be updated at the same time.
A Customer that has signed the Data Processing Addendum may object to the engagement of a new Sub-Processor for a legitimate data protection reason by emailing privacy@wollow.ai within that notice period. The resolution process is set out in Section 6 of the DPA.
Subscribe to Updates
To receive change notifications by email, send a request to privacy@wollow.ai with the subject line "Subscribe: sub-processor updates".