# Subprocessors

Last updated: 26 September 2026

These providers process personal data for Double Agent customers on behalf of Loopclub Ltd. We announce changes here at least 30 days before they take effect (see the [DPA](/legal/dpa/)). To get notices by email, write to legal@doubleagent.so.

| Provider | What it does | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Runs the API, CDN, dashboard and website (Workers, D1, KV, Queues), sends sign-in emails, and routes our email | All service data in transit; account data, site configuration, live presence and queued events at rest | Global network; headquartered in the USA |

**Our own infrastructure.** Session detail, edge request records and the 30-day raw tier are stored in Elasticsearch servers operated by Loopclub Ltd ([DATA CENTRE LOCATION]).

**Only when you turn them on.** When a customer enables the optional second-opinion judge, ambiguous sessions' evidence goes to **TypeSafe** ([LOCATION]): page path and referrer host, time zone, language and screen size, interaction timing and signal codes. Never the IP address, user agent or linked identifiers.

**Not subprocessors:**
- **Tools you connect** (Google Analytics, Meta, Shopify, Stripe, Klaviyo, Mixpanel and others) receive labels because you tell us to send them; they work for you.
- **Google Analytics and Microsoft Clarity** measure visits to our own websites only, and receive no customer data.