Legal
Subprocessors
Effective and last updated October 16, 2026
OneForm uses the service providers below to run the Service. When a firm uses OneForm, these providers may process personal information in its Customer Data on our behalf, as subprocessors. Each one processes it only on our instructions and under written data protection terms.
Current subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Railway | Hosting for the website, the app, its database and stored files | United States (us-east4, Virginia) |
| OpenAI | AI features | United States |
| Resend | Sending email and reporting delivery, opens and clicks | United States |
| Stripe | Subscription billing, tax calculation, and the payments firms take from their clients | United States |
| Twilio | Text-message alerts and phone number verification | United States |
| Cloudflare | DNS, network protection, and bot checks on sign-up, sign-in and forms | United States and its global network |
| Sentry | Error monitoring, with names, emails, phone numbers, cookies and form contents removed before sending | United States |
| Google Workspace | Our own email inbox, when you write to us | United States |
| Google Analytics | Website statistics, for visitors who haven't opted out | United States |
Tools a firm connects itself, such as its CRM, its calendar, its own Stripe account or an AI agent, are not on this list. The firm chooses and engages them, and their own terms apply.
How we tell you about changes
When we add or replace a subprocessor, we update this page, change the date at the top, and note the change in our changelog. If you have a concern about a new subprocessor, write to hello@oneform.si.
More
- Privacy Policy, section 8: the same providers, and how we share information.
- Data Processing Addendum: our commitments as a firm's service provider, including how we use subprocessors.
- Security: how the Service is hosted and protected.