content/legal/README.md.Sub-processors
Last updated: [[EFFECTIVE_DATE]] Provider: Thinqmesh Technologies (https://thinqmesh.com) — Orfyn is a Thinqmesh product
Referenced by the Privacy Policy and the DPA.
Why this list is short
Orfyn is self-hosted. Your code, prompts, repositories, and systems never reach us, so there is no sub-processor handling them. The providers below support a website and a contact form, plus optional encrypted transport.
Your model provider is not our sub-processor. When an agent sends a prompt, that request goes from your infrastructure directly to the provider you configured, on your credentials. That is your relationship and your contract. We are not in the path and never receive it.
Current sub-processors
Complete this table from your actual vendor list before publishing. Every row must be real. An inaccurate sub-processor list is a compliance failure and it is the kind of thing an enterprise reviewer checks against the DNS records for your site.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
[[HOSTING_PROVIDER]] | Website hosting and CDN | Server logs, IP addresses | [[REGION]] |
[[RELAY_HOSTING]] | Relay infrastructure | End-to-end encrypted traffic (not readable), connection metadata | [[REGION]] |
[[EMAIL_PROVIDER]] | Business email and correspondence | Name, email, message content | [[REGION]] |
[[FORM_DESTINATION]] | Meeting-request notifications | Name, email, company, size, message | [[REGION]] |
[[SCHEDULING_PROVIDER]] | Meeting scheduling | Name, email, meeting metadata | [[REGION]] |
Changes
We give at least 30 days' notice before adding or replacing a sub-processor. Customers with an executed DPA may object on reasonable data-protection grounds within that period.
To be notified of changes, email privacy@thinqmesh.com and ask to be added to the list.