Sub-processors and Service Providers
Alluvial | Effective date: 10 October 2026
This page lists providers that host or process personal data for Alluvial. Locations and services can change; provider links point to their current privacy, data-processing, or sub-processor information. Our Data Processing Agreement describes the sub-processors authorised to process Customer Personal Data in manuscripts and screening results. Product analytics is a separate controller-purpose activity described in our Privacy Policy.
| Provider | Service and data | Processing location and terms |
|---|---|---|
| Amazon Web Services (AWS) | Core application hosting, database and object storage, email delivery, and screening infrastructure. Manuscript and screening data is hosted in AWS eu-west-2 (London). | AWS Data Processing Addendum and AWS sub-processors. |
| Stripe | Payment processing and subscription administration. Receives payment and billing information; it does not receive manuscript content or screening results. | Stripe may process data in the locations described by its UK Data Processing Agreement and current sub-processor information. |
| Cloudflare | Delivery and security for the marketing website and portal. May process network and device information needed to deliver and protect those services; it does not receive manuscript content through the analytics integration. | Cloudflare's network is global. See its Privacy Policy and sub-processor list. |
| PostHog | Consent-based browser product analytics and limited server-side operational analytics. It receives pseudonymous Account/Organisation identifiers, event names and limited commercial context, not manuscript or screening content. | EU Cloud hosted in Frankfurt, Germany. See PostHog privacy documentation, Data Processing Agreement and current sub-processors. |
We update this list when a provider or processing purpose changes. Where the DPA applies, we give customers the notice and objection rights set out in that agreement.