Skip to content

Legal and compliance

Data processing agreement

The terms under which AnyLB processes personal data on your behalf.

Last updated: June 20, 2026

Roles and scope

For request metadata and configuration containing personal data, you are the data controller and AnyLB acts as your processor. This agreement applies automatically to all customers and covers every sub-processor engaged to deliver the service.

Sub-processors

AnyLB relies on Cloudflare, Inc. for global network and edge compute services, and on a small number of infrastructure providers for hosting, billing and support tooling. A current list is published at anylb.com/sub-processors and updated at least 30 days before any change.

  • Cloudflare, Inc. — network, edge compute and request handling
  • Cloud infrastructure provider — control plane hosting
  • Billing provider — subscription and invoice processing
  • Support platform — customer conversations and tickets

International transfers

Where personal data leaves the EEA or the UK, transfers rely on the European Commission's Standard Contractual Clauses, supplemented by a transfer impact assessment. Enterprise customers can request regional data residency for log storage.

Assistance and audits

We assist you in responding to data subject requests and in meeting your security obligations, at no additional cost for routine requests. Enterprise customers may audit our compliance programme once per year, or rely on our SOC 2 Type II report instead.

Need a signed copy or a questionnaire filled in?

We can return completed security questionnaires, a signed DPA, and our SOC 2 Type II report under NDA.