Infrastructure
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Cloudflare, Inc. | Compute (Workers), object storage (R2), CDN, WAF, DNS, email routing | Global, with primary processing in US | Cloudflare, Inc. — San Francisco, CA, USA |
| Cloudflare D1 | Primary relational database | US (auto-replicated) | Cloudflare, Inc. — San Francisco, CA, USA |
Payments
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Stripe, Inc. | Payment processing, invoicing, subscription billing, sales tax (Stripe Tax) | US | Stripe, Inc. — South San Francisco, CA, USA |
AI inference
AI extraction runs 100% on Cloudflare Workers AI. Customer document content never leaves the Cloudflare network boundary. Workers AI does not train on customer prompts. No third-party inference sub-processors are used.
Email and customer communication
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Cloudflare Email Service | Transactional email (authentication, billing, notifications, extraction results) | US | Cloudflare, Inc. — San Francisco, CA, USA |
Observability
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Cloudflare Logpush & Workers Analytics | Request logging, error tracing, performance metrics (no document content) | US | Cloudflare, Inc. — San Francisco, CA, USA |
Machine-readable version
The canonical, versioned sub-processor list is also available at api.ordalis.io/v1/compliance/subprocessors for procurement and vendor-risk tooling.
Change notifications
To receive email notifications 30 days before any new sub-processor is added, subscribe at legal@ordalis.io with subject "Subprocessor notifications" and the email you'd like added.
Questions
Procurement or vendor-risk questions: security@ordalis.io.
Mailing address: Tyler Gee, operating as Ordalis, 5693 Sierra Grande Drive, Taylorsville, Utah 84129, United States