Skip to content
← Frontage Terms of Service Privacy Policy Responsible disclosure Subprocessors Our scanning traffic

Subprocessors

Effective October 23, 2026

These are the service providers that process personal data for us. Each receives only what it needs for the purpose shown. Our application and its data are on servers we operate in the United States; active scans run on Amazon Web Services, also in the United States. We will update this page, and email account holders, at least 30 days before adding a provider that receives customer data.

ProviderWhat it does for usData it receivesWhere
Cloudflare, Inc.DNS for our domain; delivers our website and protects it from attack; routes mail sent to our addresses; sends our service emailsVisitors’ IP addresses and request data; the content and addresses of email we send and receiveUnited States and its global network
Stripe, Inc.Payment processing and the billing portalBilling contact and address, payment details, tax ID, if givenUnited States
Google LLCHosts the inbox where mail to our addresses is deliveredMessages sent to us, with the sender’s detailsUnited States
Slack Technologies, LLCInternal notifications to our staffNew account requests (name, email, organization, website and review flags; not phone number or address) and billing eventsUnited States
Amazon Web Services, Inc.Runs our scanning server and the encrypted queues that carry scan requests to it and results backThe domain names and addresses a customer has authorized us to scan, and the scan results, in transit; nothing is stored on the scanning serverUnited States (Ohio)
Sectigo (crt.sh)Searches public certificate transparency logsA customer’s domain name, when we search the logs for itUnited States and United Kingdom

Customers can also have alerts emailed to their own users, alerts posted to a Slack, Microsoft Teams or webhook address they set up, and reports emailed to recipients they choose. Those recipients are chosen and controlled by the customer, not by us.

Questions: privacy@frontagesecurity.com.

Colin Finley, doing business as Frontage Security · contact@frontagesecurity.com

Frontage

External attack surface monitoring for businesses.

Active scanning is carried out only against targets covered by a recorded, written authorization.

Product

What we check How it works Sample reports Pricing Guides Free domain check

Account

Sign in Request access

Legal

Privacy Policy Terms of Service Responsible disclosure Subprocessors Our scanning traffic Contact
© 2026 Colin Finley, doing business as Frontage Security. All rights reserved. One strictly necessary cookie. No tracking, no advertising, no third-party scripts.