Subprocessors
FeatureSignals uses the following subprocessors to deliver the service. This page is updated regularly as subprocessors change. Enterprise customers are notified of new subprocessors at least 30 days in advance.
Info
Last updated: Q1 2026. View the DPA for contractual details on subprocessor engagement. Enterprise customers can subscribe to subprocessor change notifications in FlagEngine at
Settings → Organization → Notifications.Cloud Infrastructure
| Subprocessor | Purpose | Data Location |
|---|---|---|
| Hetzner | Primary hosting provider — compute, storage, and networking for FeatureSignals Cloud (EU region). | Germany (Falkenstein, Nuremberg), Finland (Helsinki) |
| Amazon Web Services (AWS) | Secondary cloud provider — compute, S3 object storage for backups, and Dedicated Cloud deployments in US and APAC regions. | US (us-east-1), EU (eu-west-1), Asia Pacific (ap-southeast-1) |
| Google Cloud Platform (GCP) | Optional hosting for Dedicated Cloud customers who prefer GCP. Cloud Storage for customer-configured backup targets. | US, EU, Asia Pacific (customer-selected region) |
| Microsoft Azure | Optional hosting for Dedicated Cloud customers who prefer Azure. Blob Storage for customer-configured backup targets. | US, EU, Asia Pacific (customer-selected region) |
Monitoring & Observability
| Subprocessor | Purpose | Data Location |
|---|---|---|
| SigNoz | Metrics, distributed tracing, and alerting for the FeatureSignals platform. Self-hosted on Hetzner infrastructure. No customer data leaves our infrastructure. | Germany (self-hosted on FeatureSignals infrastructure) |
Email & Communication
| Subprocessor | Purpose | Data Location |
|---|---|---|
| Email Service Provider | Transactional email delivery — account verification, password resets, invitation emails, and notification digests. | US, EU (data routed to customer's region) |
Payment Processing
| Subprocessor | Purpose | Data Location |
|---|---|---|
| Stripe | Subscription billing, invoice generation, and payment processing for credit/debit cards. FeatureSignals never stores full payment card details. | US, with global payment processing |
| Razorpay | Payment processing for Indian customers (INR billing). UPI, net banking, and card payments. | India |
| Paddle | Merchant of record for international customers. Handles VAT, GST, and sales tax compliance. | UK, with global operations |
AI / LLM Providers
| Subprocessor | Purpose | Data Location |
|---|---|---|
| AI/LLM Provider | Powers the AI Janitor feature for stale flag detection and flag cleanup recommendations. Processes flag metadata only — flag keys, names, evaluation counts, and last-evaluated timestamps. No targeting rules, user data, or evaluation context is sent to the LLM provider. | US (Enterprise customers can opt out or configure to EU-only processing) |
What Data Subprocessors Access
Each subprocessor accesses only the minimum data necessary to perform its function:
- Infrastructure providers — Host the application, database, and backups. Have access to infrastructure-level data but not application-level customer data. All data encrypted at rest (AES-256).
- Monitoring — SigNoz processes metrics and traces. Traces may include API endpoint paths and latency data but exclude request bodies and authentication tokens. Self-hosted on our infrastructure.
- Email provider — Receives email addresses and email content for delivery. Does not have access to any other FeatureSignals data.
- Payment processors — Receive billing contact information and payment method details. Do not have access to feature flag data, evaluation data, or audit logs.
- AI/LLM provider — Receives flag metadata only (keys, names, evaluation counts, timestamps) for stale flag analysis. No targeting rules, user data, or evaluation context is shared. Enterprise customers can disable AI Janitor entirely.
Objecting to Subprocessors
Enterprise customers may object to new subprocessors within 15 days of notification:
- Email your objection to legal@featuresignals.com with specifics about which subprocessor you object to and the reason.
- FeatureSignals will work with you to find a reasonable accommodation — this may include data region restrictions, opting you out of the specific feature, or configuring an alternative provider.
- If accommodation is not possible, you may terminate the affected service without penalty, as provided in the DPA.
Warning
For Dedicated Cloud and Self-Hosted deployments, subprocessors are limited to those you explicitly choose to integrate. Your FeatureSignals instance does not share data with any subprocessor unless you configure the integration (e.g., adding a webhook URL, connecting an email provider, or enabling the AI Janitor).