Layer7 Technologies Inc.
Layer7 Subprocessors
Last updated 2 September 2026
A subprocessor is a company we use to help run the Layer7 service, and which may handle personal data in the course of doing so. This page lists the ones we rely on today. Our Privacy Policy and our Data Processing Addendum both refer back to this list.
We stay responsible for anything our subprocessors do with data we pass them. We only use ones that offer protections consistent with our own commitments, and we sign data processing terms with them where they are available.
| Subprocessor | What they do for us | What data they may handle | Where they operate |
|---|---|---|---|
| Cloudflare, Inc. | The edge network and platform Layer7 runs on today: compute, storage, analytics, and DNS. This is where traffic is filtered and where our data lives. | All traffic routed through Layer7, including visitor IP addresses and request metadata, plus the account and service data we store. | United States, with a global edge network |
| Stripe, Inc. | Payment processing and subscription billing. | Customer name, email, billing address, and card details. Card numbers are entered directly with Stripe; we do not store them. | United States |
| Backblaze, Inc. (Backblaze B2) | Encrypted off-site backups of our databases and object storage. | Encrypted backups that contain account and service data. Backups are encrypted before they leave our systems. | United States |
| FraudLabs Pro | Fraud screening when a new account signs up. | Signup signals used to score fraud risk, such as email address and IP address. | Being confirmed |
| MXroute | Delivery of our transactional email (verification codes, security alerts, invoices, attack notifications). Mail is sent as noreply@l7.gg. | Recipient email address and the contents of those messages. | Being confirmed |
| DeftForm | Intake forms for Free-tier and Enterprise applications. | What an applicant enters: name, email, domain, and their answers. | Being confirmed |
Cloudflare's role
Because the entire Service currently runs on Cloudflare's infrastructure, Cloudflare is our most significant subprocessor. Every request that reaches a protected site passes through Cloudflare's network, and our databases, key-value stores, durable objects, analytics datasets, object storage, and DNS all sit within Cloudflare. As we build our own scrubbing network, this will change, and we will update this page when it does.
Changes to this list
If we add or replace a subprocessor that handles personal data, we will update this page. Where our agreement with a customer calls for advance notice of new subprocessors, we will give it as agreed.
Contact
Questions about this list: support@l7.gg