Subprocessors
To deliver the Françoise service, we may engage certain third-party service providers as subprocessors. These subprocessors process data on our behalf and are contractually bound to:
- process data only on our documented instructions,
- apply appropriate technical and organizational security measures, and
- not use the data for their own purposes.
This page lists our current subprocessors. We will update this list when we add or replace subprocessors.
1. Infrastructure & AI Processing
| Subprocessor | Country | Service type | Data processed | When used |
|---|---|---|---|---|
| Microsoft Azure | United States | Cloud infrastructure (compute, storage, networking, databases) | Account data, design system data, application logs, anonymized analytics; ephemeral processing of mockup content during checks | Continuous operation of the service |
| Google (Gemini APIs) | United States | AI processing (LLM API) | Mockup images and layout fragments used for analysis during validation flows | Technical Validation and Business Proof phases only |
2. Categories of data processed
Depending on how you use the service, subprocessors may handle the following categories of data:
- Account data: email addresses and basic workspace information needed to provide access.
- Design system data: tokens, component definitions, rules and configuration used to run checks.
- Mockup and layout data: rendered images of mockups and limited layout fragments, processed ephemerally as part of a check.
- Operational data: logs and anonymized analytics related to performance, reliability, and usage.
We do not instruct subprocessors to use your data to train, fine-tune, or otherwise improve their models.
3. How we evaluate subprocessors
Before engaging a new subprocessor, we:
- Assess their security and privacy practices based on publicly available documentation and, where appropriate, additional due diligence.
- Ensure a written agreement is in place that requires the subprocessor to protect data consistent with our contractual commitments to customers.
- Limit the scope of data and operations to what is necessary for the specific service they provide.
4. Changes to this list
We may add or replace subprocessors as our service evolves. When we do so, we will update this page and, where required by contract or law, notify affected customers in advance, giving them an opportunity to raise questions or objections.
5. Contact
If you have any questions about our subprocessors or how they handle data on our behalf, please contact us at [email protected]