Infrastructure
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Cloudflare, Inc. | Compute (Workers), object storage (R2), CDN, WAF, DNS, email routing | Global, with primary processing in US | Cloudflare, Inc. — San Francisco, CA, USA |
| Cloudflare D1 | Primary relational database | US (auto-replicated) | Cloudflare, Inc. — San Francisco, CA, USA |
Payments
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Stripe, Inc. | Payment processing, invoicing, subscription billing, sales tax (Stripe Tax) | US | Stripe, Inc. — South San Francisco, CA, USA |
AI inference
AI extraction runs 100% on Cloudflare Workers AI (Gemma 4, Nemotron 3, Kimi K2.5, Kimi K2.6 Thinking). Customer document content never leaves the Cloudflare network boundary. Workers AI does not train on customer prompts. No third-party inference sub-processors are used.
Email and customer communication
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Cloudflare Email Service | Transactional email (authentication, billing, notifications, extraction results) | US | Cloudflare, Inc. — San Francisco, CA, USA |
Observability
| Sub-processor | Purpose | Data location | Entity |
|---|---|---|---|
| Cloudflare Logpush & Workers Analytics | Request logging, error tracing, performance metrics (no document content) | US | Cloudflare, Inc. — San Francisco, CA, USA |
Machine-readable version
The canonical, versioned sub-processor list is also available at api.ordalis.io/v1/compliance/subprocessors for procurement and vendor-risk tooling.
Change notifications
To receive email notifications 30 days before any new sub-processor is added, subscribe at legal@ordalis.io with subject "Subprocessor notifications" and the email you'd like added.
Questions
Procurement or vendor-risk questions: security@ordalis.io.
Mailing address: Ordalis LLC, 5693 Sierra Grande Drive, Taylorsville, Utah 84129, United States