Tonk Subprocessors

Version 1.0 — last updated 28 August 2026

This page lists third parties Tonk Labs Limited engages to process Customer Personal Data on its behalf under the Tonk Data Processing Addendum. It does not disclose Tonk's detailed architecture.

Subprocessor	Processing function	Customer Personal Data	Processing locations	Transfer safeguards where required
Cloudflare, Inc.	Hosted-service infrastructure, storage, databases, networking, security, delivery and related technical operations	Space Content; account, Service and resource identifiers; permission, request, connection, usage and diagnostic information	United Kingdom, European Economic Area, United States and global network locations depending on the Service, configuration and user location	Adequacy decisions where applicable; European Commission Standard Contractual Clauses, the UK Addendum or another lawful mechanism where required

Providers used solely for Tonk's own controller activities, such as account communications, marketing or Tonk's product analytics, are not subprocessors under the DPA merely because Tonk uses them. The categories of recipients used for those activities are described in the Tonk Privacy Policy.

Changes and objections

Tonk may update this list as the Service changes. Where the DPA requires advance notice of a new subprocessor, Tonk will provide that notice by email, through the Service or by another method described in the DPA.

A business customer may object during the notice period on reasonable and documented data-protection grounds by emailing support@tonk.xyz with the subject SUBPROCESSOR OBJECTION. The process and available remedies are set out in section 7 of the DPA.

For questions about this list or the location and safeguards applicable to particular processing, contact support@tonk.xyz.