Last updated January 2026
Introduction
StructureFlow uses the third-party entities listed below (each, a Sub-processor) to process Customer Personal Data (as defined in the Platform Service Terms) on behalf of its customers in accordance with agreements between StructureFlow and each Sub-processor to uphold StructureFlow’s commitments under the Data Processing Addendum. Terms beginning with a capital letter have the same meaning as set out in the Platform Service Terms or Data Processing Addendum.
| Sub-processor | Contracting entity | Summary of processing activities | Location of processing activities | Contractual mechanisms | Assurances regarding FISA Orders and National Security Letters (US) | Legal terms |
|---|---|---|---|---|---|---|
| Mailgun | Mailgun Technologies, Inc. and relevant group companies | Provision of transactional email API to enable service communications to be sent to Authorised Users and Collaborators in connection with use of the Platform Service | United States of America | EU Standard Contractual Clauses and UK International Data Transfer Agreement incorporated by reference (see para 12 (Data Transfers) of the Sinch Data Processing Agreement) | Mailgun’s parent company, Sinch, maintains a Law Enforcement Portal that describes its policy for handling law enforcement requests from within and outside the US and Canada | Sinch Data Processing Agreement Mailgun Privacy Policy Mailgun Terms of Service |
| Microsoft Azure | Microsoft Ireland Operations Limited | Hosting of the Platform Service and Customer Data | The ‘Agreed Hosting Location’ specified in the Order Form | EU Standard Contractual Clauses and UK International Data Transfer Agreement incorporated by reference (see ‘Data Transfers and Location’ section of the Microsoft Products and Services Data Protection Addendum) | Microsoft’s approach to law enforcement requests is described in a series of FAQs and Microsoft publishes a twice-yearly Government Requests for Customer Data Report | Microsoft Products and Services Data Protection Addendum Microsoft Privacy Statement Microsoft Customer Agreement1 |
| Twilio | Twilio Inc. and relevant group companies | Provision of two-factor authentication API to ensure secure access to the Platform Service | United States of America | EU Standard Contractual Clauses and UK International Data Transfer Agreement incorporated by reference (see Schedule 3 (Cross Border Data Transfer Mechanisms) of the Twilio Data Protection Addendum) | Twilio’s approach to law enforcement requests is described in its Law Enforcement Guidelines and Twilio publishes a twice-yearly Transparency Report | Twilio Data Protection Addendum Twilio Binding Corporate Rules Twilio Privacy Notice Twilio Terms of Service |
- To view the applicable terms, select: Geography, United Kingdom; Language, English (UK); Purchase Channel, Enterprise Customer; Audience, Commercial ↩︎
