Intentflow
The third-party service providers we use to operate Intentflow, and what each one does.
Last updated: September 3, 2026
Where you store personal data (as defined under the EU General Data Protection Regulation) in your NetBox instance, Intentflow acts as a data processor and you act as the data controller - see our Privacy Policy for the full breakdown. GDPR Article 28 requires us to disclose the sub-processors we rely on to do that. This page is that disclosure, kept separate from the Privacy Policy so it's easy to find and check on its own, including as part of your own vendor review process.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, database, authentication, email delivery, backups, encrypted storage of uploaded configurations and reports, and the compute analysis runs on | USA (us-east-1) |
| Stripe | Payment processing | USA / EU, per Stripe's own setup |
| Cloudflare | Bot/abuse protection on signup and contact forms (Turnstile); cookieless website traffic analytics (Web Analytics) | Global network |
Where these providers process data outside the European Economic Area, they do so under their own GDPR-compliant transfer mechanisms (such as the EU-US Data Privacy Framework or Standard Contractual Clauses) - we haven't independently audited each provider's mechanism beyond what they publish.
If we add or replace a sub-processor in a way that materially changes how your data is handled, we'll update this page and, for active customers, notify you by email in advance where practical - see our Data Processing Addendum for the objection process.
Questions about this list: support@intentflow.co.