Subprocessors

Last updated: August 14, 2026

Fundra uses trusted third-party subprocessors–such as cloud infrastructure providers, analytics services, and support tools–to deliver our platform. We enter into GDPR-compliant Data Processing Agreements (DPAs) with each subprocessor to ensure personal data is protected wherever it is processed.

Subprocessors are grouped into two categories:

  1. Subprocessors for data about you (our customer) – Fundra is the controller of this data under GDPR. This includes your team’s account information, billing details, and interactions with our platform.

  2. Subprocessors for data you store in Fundra – Fundra is the processor of this data. You (the fund) are the controller. This can include information about portfolio companies, founders, fund operations, investors, capital activity, and related documents.


Data Fundra Controls (Your Team’s Data)

Fundra is the controller of data related to your organization’s use of our service. This does not include fund-related or portfolio-related data you enter into the platform.

SubprocessorPurposeRegion
SupabaseDatabase hostingUK
SupabaseFile storageUK
Fly.ioServer hosting (ephemeral)UK
Amazon Web ServicesServer hostingUK
HetznerServer hosting (ephemeral)EU
CloudflareContent delivery network (CDN)EU, US
GoogleAccount authenticationUS
PosthogAnalytics trackingEU
SentryError monitoringUS
StripeInternal and external communicationsUS
OpenAIAI model inferenceUS
Google (Vertex AI)AI model inferenceUS
BasetenAI model inferenceUS

AI model inference providers used by Fundra are required to maintain Zero Data Retention (ZDR) in accordance with our Security Policy.


Data You Control (Data Stored in Fundra)

Fundra is the processor of any data you input or upload to the platform. This includes, but is not limited to:

  • Portfolio company data (e.g. founders, KPIs, ownership)

  • Fund data (e.g. capital calls, LP information, fund performance)

  • Documents (e.g. shareholder agreements, board decks)

  • Notes and internal records

We do not sell or share this data with third parties.