Subprocessors
Requests360 production subprocessors
Flevanta Origins Ltd uses a small number of service providers to operate Requests360. This page distinguishes providers currently used for customer workspace processing from optional providers that are not yet activated for Requests360 production data.
Draft · Effective 28 October 2026 · Flevanta Origins Ltd, trading as Forge4Biz
Active production subprocessors
Flevanta Origins Ltd
Purpose: Application hosting, database and sign-in on Flevanta Origins Ltd's own server in the UK (self-hosted). Supabase Pte. Ltd. does not receive the data.
Processing: United Kingdom. The database runs only on this server; no outside database provider receives the data.
Cloudflare, Inc.
Purpose: All traffic goes through the Cloudflare network and tunnel: CDN, TLS, DDoS protection and routing
Processing: United States and the global Cloudflare network. All customer traffic uses this network by design. Transfers to Cloudflare, Inc. in the US rely on the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge), under which Cloudflare states it is certified; if that certification lapses, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in Cloudflare's DPA applies. A copy is available on request.
Optional providers not yet active for Requests360 production processing
Plus Five Five, Inc. (Resend)
Purpose: Inbound and transactional email for External cases
Status: Not active for real Requests360 customer email until provider verification and a controlled delivery test are completed.
Stripe
Purpose: Subscription billing and payment processing
Status: Flevanta has a Stripe account, but Requests360 self-service billing is not currently active. Stripe becomes relevant to Requests360 customer billing only when that feature is enabled.
Former / being removed
Netlify, Inc. previously provided web application hosting, build and deployment, edge delivery and server-side application processing. It is a former host and is being removed. Delete this note after the DNS move.
Other Forge4Biz providers
Microsoft may process information for Forge4Biz's own business email or enquiry communications. Microsoft is not currently used as storage for Requests360 customer workspace content. GitHub is used for source-code development and is not an authorised repository for real customer workspace records.
Changes and objections
Before a material new or replacement provider begins processing Requests360 customer workspace personal data, we will normally give at least 14 days' prior notice and update this list, subject to the urgent security/legal exception described in the Requests360 Data Processing Agreement. Customers can raise a reasonable data-protection objection through [email protected].