Trust Center
Subprocessors
Every third-party provider involved in running InfiniDrive, and exactly what each one does.
Current providers
InfiniDrive keeps its provider list short. E2E-encrypted files reach storage and delivery providers as ciphertext, without usable decryption keys. Providers still process the account, network, and operational data needed for their roles, as described below.
| Provider | Role | Processing location |
|---|---|---|
| Hetzner Online GmbH | European compute and storage infrastructure hosting customer content | European Union |
| Cloudflare | DNS, TLS delivery, and edge network services for public endpoints | Global edge network; EU entry points |
| Stripe | Payments and subscription billing | EU/US; acts as an independent controller for regulated payment data |
What providers do not receive
Stripe does not receive your stored files, and InfiniDrive does not receive your full card number. Cloudflare provides TLS termination and delivery, but E2E-encrypted file contents remain separately encrypted inside that connection. Neither our storage providers nor Cloudflare receive the secrets required to decrypt those file contents. E2E encryption does not hide the operational metadata described on the Security page.
Change notice
Additions or material role changes are published on this page with an updated effective date before the provider begins processing customer content, where reasonably practicable. Organizations that require direct notification can arrange it via privacy@infinidrive.app.
Open-source software
InfiniDrive publishes the complete corresponding source for the modified open-source components used by the service, tied to immutable production image digests and SHA-256 checksums.