/

Companies / ComplyFlow / Subprocessors

ComplyFlow subprocessors

complyflow.com

ComplyFlow provides contractor management software for prequalification, workforce compliance, training, site access, and inspections. It serves organisations that need to track contractors, workers, and sites across industries including construction, mining, energy, healthcare, government, and property.

Summarized from its homepage on 8 Nov 2026.

Classified asCompliance and risk

The ComplyFlow homepage

Subprocessors of ComplyFlow

ComplyFlow declares 8 subprocessors, including AI providers Google Gemini, Anthropic.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
Amazon Web ServicesPlatform hosting, database and file storageAustralia (Sydney)8 Nov 2026
Anthropic Claude, via Amazon BedrockAI document review. Inputs and outputs are not used for model training.Australia (Sydney)8 Nov 2026
AtlassianFedRAMP registrySupport ticketingAustralia (Sydney)8 Nov 2026
CoassembleAI-assisted training course authoring (optional feature)United States8 Nov 2026
Google CloudEncrypted offsite backup copyAustralia (Sydney)8 Nov 2026
Google GeminiAI processing and general business use, such as image generationAustralia (Sydney)8 Nov 2026
IntercomIn-app messaging and supportAustralia (Sydney)8 Nov 2026
TwilioGenerates SMSUnited States8 Nov 2026

Questions about ComplyFlow

Certifications

StandardWhat the source saysChecked
ISO 27001Company's statement“ISO 27001 Information security, certified since 2019.”The company's own statement. We have not checked an accreditation registry.13 Nov 2026Source

We last read its homepage on 13 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean ComplyFlow lacks it.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See ComplyFlow's full stack

Every vendor with its source and date, and an alert when ComplyFlow adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call