Who processes your data with us.
A sub-processor is a third party that processes personal data on our behalf to deliver the service. Under GDPR Article 28 and Korea's Personal Information Protection Act (PIPA), we disclose them here and keep this page authoritative. Adding or replacing a sub-processor follows the change process below. Identity providers you choose to sign in with are not sub-processors — see the relevant section.
Third parties that process personal data.
These sub-processors process customer personal data on our behalf. Each operates under a data processing agreement and the safeguards noted below.
| Sub-processor | Processing |
|---|---|
| Cloudflare, Inc.Global infrastructure | Workers execution, the database connection path (encrypted Tunnel and Access), KV, R2 object storage (the daily database backup copy), Queues. Processes authentication requests, tokens, session records, audit logs and PII at the edge. The primary database is on Modfolio's own server, not Cloudflare (§03). D1 holds only the copy taken at the 2026-10-13 switchover, kept for rollback and deleted once the service has stabilised.SOC 2 Type II · ISO 27001 · ISO 27018 |
| Resend, Inc.Transactional email | Delivers transactional email — verification, magic link, password reset, and security notifications. Receives recipient email addresses and message content.SOC 2 Type I (Type II in progress) |
Self-hosted systems, no third-party access.
These operational systems run on infrastructure we operate ourselves (our own Cloudflare account and our own server). No external vendor sees customer personal data through them; they are listed for transparency.
- athsra — operational secret storage. Secrets are envelope-encrypted as R2 ciphertext on our own Cloudflare Worker; it holds no user data. (Replaced 1Password as of athsra v3.)
- SigNoz / OpenTelemetry collector — observability (traces, metrics, logs), self-hosted. Personal data is automatically redacted before it reaches the collector.
- PostgreSQL database — the primary copy of account, session and audit records (since 2026-10-13). It sits on a server Modfolio operates itself in the Republic of Korea and is reached only over authenticated connections through Cloudflare Tunnel and Access.
Identity providers are independent controllers.
When you choose to sign in with Google, GitHub, Kakao, or Naver, those providers act as independent controllers under their own terms — not as our sub-processors. We receive identity claims from them only at your direction; we do not direct their processing.
How we announce changes.
Before a new sub-processor begins processing personal data, we update this page and give enterprise customers advance notice as set out in their data processing agreement, along with the right to object. This page always reflects the current, authoritative list.
Questions about sub-processors.
Questions or objections regarding our sub-processors can be raised through the following channels.
- GitHub Security Advisory (private): github.com/modfolio/modfolio-connect/security/advisories/new
- General inquiries (may be public): github.com/modfolio/modfolio-connect/issues