Subprocessors
Effective June 29, 2026
Summary. The vendors that process your data. Annually reviewed. This page documents our position in plain English. Where the full legal text is required, reach out to [email protected].
| SUBPROCESSOR | PURPOSE | DATA | LOCATION & SAFEGUARDS |
|---|---|---|---|
| Stripe, Inc. | Payment processing and billing | Payment card data, billing name and address, transaction history | United States · PCI-DSS Level 1 · DPA with SCCs |
| Amazon Web Services, Inc. | Cloud hosting, storage, and backups | Account data, filings and documents (encrypted at rest) | United States · DPA with SCCs |
| Cloudflare, Inc. | CDN, DNS, and DDoS protection | Technical data: IP address, request logs, security telemetry | Global edge, US-based · DPA with SCCs |
| Twilio, Inc. (incl. SendGrid) | Transactional email and SMS notifications | Name, email address, phone number, message content | United States · DPA with SCCs |
Register current as of August 4, 2026. New subprocessors are added here at least 30 days before they process customer data, per the update policy below.
Scope. This subprocessor register applies to all File.Business products and services: the Business Operation System (BOS), Compliance Subscription, one-time filings, BosAI, marketplace, partner program, API, and all related services.
Updates. We may update this subprocessor register from time to time. Material changes will be announced via email and in-app notification at least 30 days before taking effect.
Questions. Contact [email protected] or write to File.Business, Inc., 101 N Monroe St, Suite 800, Tallahassee, FL 32301.
Governing law. Delaware. Disputes resolved per our master agreement.
This page is a summary. The full text governs and is available upon request.
Common questions.
Where is the full text?
Available via [email protected] or in your account settings.
How are changes announced?
Email + in-app notification 30 days before effective date.
Who governs disputes?
Delaware governing law and venue.
Privacy concerns?
[email protected] · Dedicated DPO.