The short version
- Restaurant records are kept on Frontroom servers in the UK, which we own and run.
- The companies below help us run Frontroom. Each one only processes data on our instructions, under a data protection agreement with us, and only gets what it needs for its task.
- We tell customers at least 10 business days before we add or replace a company that handles restaurant data, so they can object.
- Our Data Processing Agreement sets out the rules, and our privacy policy explains the rest.
Companies that handle restaurant data
When a restaurant uses Frontroom, the restaurant is the controller of its data and we are its processor. These companies are our subprocessors: they help us provide Frontroom and process some of that data for us.
| Company | What it does for Frontroom | Data it handles | Where |
|---|---|---|---|
| Cloudflare | Delivers this website and the app, runs our domain names (DNS), protects both from attacks, carries traffic between browsers and our servers, and forwards email sent to our addresses. | Everything sent to or from Frontroom passes through its network, and email sent to our addresses. | Worldwide, at the data centre nearest the user |
| Resend | Sends account emails, such as invitations, password resets and service messages. | The recipient's name and email address, and the email itself. | European Union (Ireland) |
| Sentry | Error tracking: tells us when something in Frontroom breaks, so we can fix it. | Technical error reports. Before a report leaves our servers, we remove names, email addresses, phone numbers, IP addresses, card and bank numbers, passwords and the content of requests. | European Union (Germany) |
| Mixpanel | Product analytics: counts which features are used. | Pseudonymous usage events, such as a paid till order or an invoice photo read, labelled with codes. Never names, email addresses, phone numbers or IP addresses. | European Union |
| Amplitude | Product analytics: the same counts as Mixpanel. | The same pseudonymous usage events as Mixpanel, and nothing more. | European Union |
| OpenAI (AI model provider) | Runs the AI model behind Ask and photo reading. | The question or photo, and the records needed to answer it or to draft the entry. | United States |
| Speech-to-text provider | Turns voice notes into text. | The voice recording. The text comes back to Frontroom and is saved with the record it belongs to. | United States |
| Oracle Cloud | Stores an encrypted off-site copy of our nightly database backup. | Encrypted backup files only. They are encrypted before upload and only Frontroom holds the key, so Oracle cannot read them. | United Kingdom (London) |
| Hosts the inbox for email you send to support@frontroom.ai. | The emails you send us and our replies. | United States and Europe |
When a company processes data outside the UK, the transfer is protected as UK law requires: by UK adequacy regulations, or by standard contractual clauses (the ICO's International Data Transfer Agreement, or its UK Addendum to the EU standard contractual clauses).
Our own servers
Frontroom's application, database and nightly backups run on Frontroom servers in the UK that we own and operate. That is where restaurant records are stored. The companies above only receive what they need to do their task.
Notifications
If a user turns on Frontroom notifications in their browser, each notification is delivered by that browser's own push service, such as Apple's, Google's, Microsoft's or Mozilla's. We encrypt the notification on our servers before it is sent, so the push service cannot read it.
Card payments
Frontroom does not take card payments online yet. We will add the payment provider to this list, and tell customers, before we start.
Website and sales tools
These tools handle data about visitors to frontroom.ai and people who contact us. For this data we are the controller, as our privacy policy explains. They never receive the records restaurants keep in Frontroom.
| Company | What it does | When | Where |
|---|---|---|---|
| Google (Google Analytics) | Counts visits to this website and, with marketing consent, measures our Google adverts. | Only if you allow analytics or marketing cookies. The app's sign-in and sign-up pages follow the same choice. | United States |
| Microsoft (Clarity) | Shows us how visitors use this website, as heatmaps and recordings of visits. | Only if you allow analytics cookies. | United States |
| Meta (Meta Pixel) | Measures our adverts on Facebook and other Meta services. We and Meta are joint controllers for this. | Only if you allow marketing cookies. The app's sign-in and sign-up pages follow the same choice. | United States |
| HubSpot | Our customer records system (CRM) and the chat on this website. It keeps the details and messages of people who contact us, and records visits to this website. | Visit tracking and the chat only if you allow marketing cookies. | European Union (Germany) |
Our cookie policy lists the cookies these tools use and how long they last.
Changes to this list
We update this page whenever the list changes. Before a new company starts handling restaurant data, we email every account owner at least 10 business days ahead, so they have time to object, as section 7 of our Data Processing Agreement explains.
- 25 October 2026: list first published.
Questions
Customers can ask us for more detail about any company on this list, including a copy of, or a link to, the data protection terms we have with it. Email support@frontroom.ai.