Sub-processors

These are the third parties we rely on to run Arbor Lane. We list them so you can review their data processing terms alongside ours. We give customers who subscribe at least 30 days' notice before adding a new sub-processor.

Current sub-processors

Cloudflare, Inc.

United States

Purpose: Compute (Workers), database (D1), file storage (R2), key-value (KV)

Data: All customer data

Cloudflare Customer DPA

Stripe, Inc.

United States

Purpose: SaaS billing and HOA dues collection via Stripe Connect

Data: Billing email, payment instruments, payout banking (last 4 + routing number for display only — full numbers stay at Stripe)

Stripe DPA

Twilio Inc. (SendGrid)

United States

Purpose: Transactional email delivery (account notifications, password resets, system emails)

Data: Email addresses, message body content

Twilio DPA

650 Industries, Inc. (Expo)

United States

Purpose: Mobile push notification delivery to iOS and Android devices

Data: Push notification tokens, notification body preview

Expo DPA

Last reviewed June 3, 2026. We review this list quarterly and at every sub-processor change.

Subscribe to change notifications

Email legal@arborlane.app with the subject "Sub-processor notifications" to subscribe. We'll email you before we add a new sub-processor.