Subprocessors and Service Providers
Last reviewed August 24, 2026
The exact providers used depend on enabled features and deployment configuration. Account owners should review this page together with the Privacy Policy and their own customer notices.
WebFormafy does not sell personal data or share it for behavioral advertising across contexts. Listed providers receive data for the stated operational purpose or an integration selected by the customer. Contract, configuration, location, security, retention, and terms for independent use must be validated before a provider is enabled in production.
| Provider/category | Purpose | Data categories |
|---|---|---|
| Microsoft Azure | Application, database, storage, monitoring, and backup infrastructure | Account, submission, order, operational, and security data |
| Stripe | Hosted payments, eligible wallets, Connect marketplace flows, disputes, refunds, and optional tax | Payment/order metadata, billing/fulfillment data, transaction references |
| PayPal | Configured payment and subscription processing | Payment/order metadata and transaction references |
| Square | Configured payment and subscription processing | Payment/subscription metadata and transaction references |
| Twilio SendGrid / configured SMTP provider | Transactional email | Email address, message content, delivery metadata |
| OpenAI, when an AI feature is affirmatively used | Assistance with form design and content | Prompt and form design context; PHI and personal submission data are prohibited |
| Integrations selected by the customer | CRM, spreadsheets, messaging, automation, and webhooks | Data selected or configured by the account owner |
Hosted payment pages reduce exposure to card numbers but do not eliminate PCI DSS responsibility. Eligible tenant merchants may qualify for merchant SAQ A. WebFormafy's separate role as a platform or service provider must be confirmed with its acquirer or payment brands; SAQ D for Service Providers is the only self assessment questionnaire available to service providers that are eligible for an SAQ.
Material provider changes will be reflected by updating this page and providing additional notice where contract or law requires it. Questions may be sent to SkyGridobe@gmail.com.