Subprocessors
Last updated: 23 February 2026
Fernly Digital Services ("Fernly") uses the subprocessors listed below to provide and operate the Fernly service. Each subprocessor is engaged under written terms that require appropriate confidentiality, security, and data protection obligations consistent with our Data Processing Agreement (DPA).
We will update this page and provide notice at least 30 days before adding or replacing a subprocessor where the change materially increases risk to customer personal data.
Subprocessors list
| Subprocessor | Purpose | Data location / processing notes |
|---|---|---|
| Vercel, Inc. | Application hosting, edge network, serverless compute | Vercel operates a global edge/PoP network and multiple compute-capable regions; some content may be served/cached at the edge globally. Vercel states that static assets and function responses can be cached in EU regions but are ephemeral, and that no data is stored permanently inside EU regions. |
| Neon, Inc. | Managed PostgreSQL database hosting | Neon supports deployment in multiple cloud regions (AWS/Azure). Data location depends on the region selected for the project. (Fernly config: UK / West EU where available.) |
| Upstash, Inc. | Managed Redis (job queues, caching) | Upstash Redis supports selecting a primary region and (optionally) additional read/replica regions, including EU-West (Ireland), EU-West (London, UK), and EU-Central (Frankfurt). (Fernly config: UK / West EU.) |
| Stripe, Inc. | Payment processing, subscription billing, invoicing | Stripe processes payment and billing data; processing may occur in multiple locations depending on the Stripe services used and configuration. |
| Resend, Inc. | Transactional and outreach email delivery | Resend allows sending emails from multiple regions (including Ireland). However, Resend states that customer data residency is not changed by multi-region sending and that customer data is still stored in the United States. |
| Google LLC (Google Places API) | Business data discovery and enrichment for lead generation | Google Places API is a global service; processing may occur in multiple locations depending on Google’s infrastructure and routing. |
Note on "UK/West EU hosting": Where our infrastructure vendors allow region selection (e.g., Neon, Upstash), Fernly configures services in UK and/or West EU regions. Some subprocessors (e.g., edge/CDN and email providers) may still involve global routing, caching, or processing as described above.
Change notifications
We will notify customers via email and/or in-app notice at least 30 days before adding or replacing a subprocessor where the change materially increases risk to personal data. If you object to a new subprocessor on reasonable data protection grounds, you may contact us within the notice period to discuss alternatives or exercise termination rights under our DPA.
Questions
Contact: legal@fernly.io