Templates pending legal review. This list is maintained
alongside the DPA and
Privacy page. Material changes to this
list will appear here at least 30 days before they take effect.
Sub-processors
Last updated: 2026-04-23 (draft).
The OSS local proxy runs entirely on the Customer's machine and has no Sub-processors — your prompts and business data never cross TokenPak's boundary. The Sub-processors below apply only to the Pro-tier services (license server, private package index, portal).
Current Sub-processors
| Sub-processor | Purpose | Data categories | Jurisdiction |
|---|---|---|---|
| Stripe, Inc. | Payment processing for Pro-tier purchases. | Billing email, payment method metadata, transaction records. | United States |
| Cloudflare, Inc. (R2 + DNS + Email Routing) | Storage backing the private package index (pypi.tokenpak.ai); DNS for all TokenPak subdomains; email routing for hello@tokenpak.ai. | Package wheels (no Customer prompt content); DNS queries; email-forwarding headers (envelope routing only). | United States |
| Fly.io, Inc. | Hosting for the license server. | License tokens, seat allocations, verification logs. No Customer prompt content. | United States |
| GitHub, Inc. | Source-code hosting (public OSS + private engineering repos) + public PyPI stub distribution once live. | No Customer data is stored in GitHub repositories. | United States |
| Python Package Index (PyPI, PSF) | Public distribution of the tokenpak OSS package (and the forthcoming tokenpak-paid discovery stub, per distribution model E2). | No Customer data. Public package metadata only. | United States |
Not Sub-processors (for clarity)
- LLM providers (Anthropic, OpenAI, Google, etc.) — when TokenPak forwards a request to a provider, the Customer (not TokenPak) is the one sharing data with that provider using the Customer's own credentials. TokenPak is a transparent pass-through for the provider relationship.
- Anonymous usage metrics — TokenPak does not collect anonymous usage metrics by default and has no telemetry ingest endpoint. If that ever changes, it will land here first.
Contact
Objections or questions about a sub-processor: hello@tokenpak.ai.