Trust and legal
Subprocessors
Last updated 27 October 2026
The short version
Ferry uses a small number of companies to run. None of them can read the files you send, because files are sealed on your device before they leave it.
| Company | What it does for Ferry | What it can see |
|---|---|---|
| Vercel | Hosts the website and runs its servers. | Web requests, including IP addresses, as any host sees them. |
| Convex | The database for devices, rooms, accounts, history and held-file records. | Account and device records, and sealed file metadata. Not file contents or keys. |
| Cloudflare | Stores sealed held files (R2), relays traffic when a direct path fails (TURN), and runs DNS. | Sealed bytes it cannot read, and relay traffic that is already encrypted. |
| Kinde | Sign-in for accounts. | Your email address and sign-in details. |
| Resend | Sends emails about access requests and invitations. | Your email address and the message. |
| Public STUN servers that help two devices find a direct route. | Network addresses of the devices, as part of finding a route. |
Changes
When this list changes, the date at the top changes with it. Read the privacy policy for how data is kept and deleted.