Current production architecture
ProviderPurpose and data
RailwayApplication, API, worker and managed PostgreSQL hosting; encrypted transport, application and customer workspace data, logs and backups. Processing region must be verified in the final production evidence pack.
Google (Gmail / Google APIs)User-authorised mailbox connection and delivery/receipt of relevant messages; OAuth identifiers and requested message data.
Google (Gemini)AI functions requested using a customer-provided, encrypted API key; relevant prompts and content for those functions.
OpenAIGridFlow-managed research/drafting assistance where configured; relevant prompts, source context and outputs.
ResendTransactional password, device, activation, receipt, renewal and privacy-request email delivery when enabled in production. Recipient, subject and message content.
Controller services, not subprocessors
Wise Business is used to receive and verify invoices/payments. GridFlow records a limited payment reference and entitlement result, but does not give Wise access to customer workspaces through the application. Wise is therefore normally an independent controller for its regulated payment service rather than a GridFlow subprocessor.
Changes
Providers are used only when the relevant feature is configured. GridFlow will update this list before materially changing the production processor chain and, where the DPA applies, provide reasonable notice of a new material subprocessor. Customers can raise a reasoned data-protection objection through the Privacy Centre.
Contact
GridFlow Support
gridflowsupport@gmail.com