Trust & Security
Our sub-processors, in full view
Last updated: 28 August 2026
Fredo uses the following sub-processors to deliver its services. Changes to this list are notified to customers in accordance with clause 6.2 of our Data Processing Agreement, with at least 30 days' notice before a new sub-processor takes effect. Questions can be directed to privacy@hifredo.com.
Current sub-processors
| Sub-processor | Purpose | Location | Transfer safeguard | DPA |
|---|---|---|---|---|
| Google Cloud EMEA Ltd. | Cloud hosting (servers, storage, backups) | EU (Belgium) | Not applicable (EU) | View DPA |
| DigitalOcean, LLC | Cloud hosting (servers, storage, backups) | EU (Germany) | Not applicable (EU) | View DPA |
| Cloudflare, Inc. | Web traffic delivery and security (DNS, CDN, WAF, DDoS mitigation). Traffic is processed transiently in-memory at the nearest edge data center; logs and account metadata are stored in core data centers (EU/US). | Global edge; EU and US core | EU-US Data Privacy Framework | View DPA |
| Okta, Inc. (Auth0) | User registration, authentication, login event management, multi-factor authentication | EU (primary: Germany; secondary: Ireland) | Not applicable (EU) | View DPA |
| Hookdeck Technologies, Inc. | Webhook infrastructure, event routing, queuing and delivery monitoring | Canada and US | Canada adequacy decision (Art. 45 GDPR); EU-US Data Privacy Framework / SCCs for US sub-processors | View DPA |
| Scaleway | Email client. Sending transactional emails to attendees. | EU (primary: France; secondary: Italy) | Not applicable (EU) | View DPA |
Security assurance
Our sub-processors maintain the following independent security certifications and attestations, as published by each provider (last verified 12 August 2026):
| Provider | Certification |
|---|---|
| Google Cloud | ISO 27001 certified; SOC 2 attested |
| DigitalOcean | ISO 27001 certified; SOC 2 attested |
| Cloudflare | ISO 27001 certified; SOC 2 attested; EU-US Data Privacy Framework certified |
| Okta (Auth0) | ISO 27001 certified; SOC 2 Type II attested |
| Hookdeck | SOC 2 Type 2 attested; annual penetration testing |
| Scaleway | ISO 27001 (ISO/IEC 27001:2022) |
Change log
- 28 August 2026: Initial publication of this list under the Fredo name.
Questions?
Questions about Fredo's sub-processors? Get in touch with Fredo Privacy & Compliance — privacy@hifredo.com