Subprocessors

// TRUST CENTER

Security, privacy, and HIPAA made clear.

Everything your security and procurement teams need to evaluate Fluent—our controls, HIPAA approach, subprocessors, and policies, in one place.

Have a security or procurement question? Reach us directly at trust@fluentworks.com

Overview Controls Subprocessors Resources FAQ Updates

Last updated: June 22, 2026

Subprocessor change notice policy

We provide at least 30 days' notice before adding a new subprocessor, except in cases of urgent security, legal, or service-continuity needs.

Third-party providers that process data on behalf of Fluent.

Amazon Web Services (AWS) · Infrastructure Hosting Core Product US
Google Cloud / Firebase · Authentication & Push Notifications Core Product US
Stripe · Payment Processing Core Product US
Twilio · SMS Verification Core Product US
SendGrid (Twilio) · Transactional Email Delivery Core Product US
Sentry · Error Monitoring Core Product US
New Relic · Performance Monitoring Core Product US
Google Maps Platform · Maps & Geocoding Core Product US
ConfigCat · Feature Flags Core Product US
IPify · IP Address Lookup Core Product US
Google Analytics · Website Analytics Marketing site only US

No subprocessors match your search.

Customers should not include PHI in email/SMS/push notifications or telemetry payloads. If a Customer signs a BAA and uses Fluent with PHI, PHI is hosted within our core infrastructure and handled in accordance with the Agreement and BAA.

Questions about subprocessors? Contact trust@fluentworks.com.

Request security documentation

Tell us a bit about you and we’ll share the requested documents under NDA, typically within 1–2 business days. Available on request: security questionnaire (CAIQ / SIG Lite), data-flow diagram, architecture overview, and our vulnerability-scanning summary.