Legal
Sub-Processors
Transparency about who processes your data. This page lists all third-party service providers that process personal data on our behalf.
Last updated: December 29, 2024
Current Sub-Processors
The following third-party service providers ("sub-processors") process personal data on behalf of Fora to provide our service:
| Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic | AI assistance (Claude) | User queries, document context for task extraction and chat | USA |
| OpenAI | AI embeddings and supplementary processing | Document snippets for vector embedding generation | USA |
| Google Cloud Platform | OAuth authentication, API access | Authentication tokens, API requests to Google Workspace | USA |
| Hivelocity | Infrastructure hosting, database storage | All application data (encrypted) | USA |
| Cloudflare | CDN, DNS, DDoS protection | Web traffic metadata (no persistent storage) | Global |
| Wasabi | Encrypted backup storage | Encrypted database backups | USA |
Data Processing Details
AI Providers
Anthropic and OpenAI process user queries and document context to provide AI-powered features. Both providers have enterprise agreements with zero data retention (ZDR)—they do not store or use your data for model training.
Infrastructure
AWS provides our primary infrastructure including compute, database (RDS PostgreSQL), and encryption key management (KMS). All data is encrypted at rest and in transit.
Edge Services
Cloudflare provides CDN, DNS, and security services. They process web traffic metadata for routing and protection but do not persistently store application data.
Sub-Processor Updates
We may update our list of sub-processors from time to time. When we add a new sub-processor that processes personal data:
- We will update this page with the new sub-processor information.
- Enterprise customers with Data Processing Agreements will receive advance notice per their agreement terms.
- You may object to a new sub-processor by contacting us at privacy@fora.is.
Data Processing Agreement
For customers requiring a formal Data Processing Agreement (DPA) compliant with GDPR and other data protection regulations, our standard DPA is available:
View our Data Processing Agreement
For custom terms or to request execution, contact legal@fora.is.
Questions
If you have questions about our sub-processors or data processing practices, please contact:
- Privacy inquiries: privacy@fora.is
- Legal/DPA requests: legal@fora.is