Subprocessor List
Third-party companies that process personal data on behalf of filemanager.bd
About This List
filemanager.bd uses certain third-party service providers ("subprocessors") that may process personal data submitted by users of our platform. This page lists those subprocessors, what data they receive, and the purpose for which they are used.
Last updated: 2026-05-26
Payment Processing
| Subprocessor | Location | Data Processed | Purpose |
|---|---|---|---|
| bKash Limited | Bangladesh | Payment amount, transaction IDs, mobile numbers (as provided during payment) | Mobile financial service (MFS) payment processing |
| Nagad (Bangladesh Post Office) | Bangladesh | Payment amount, transaction IDs, mobile numbers (as provided during payment) | Mobile financial service (MFS) payment processing |
| SSLCommerz | Bangladesh | Payment amount, transaction IDs, card/bank details (processed by SSLCommerz, not stored by us) | Card and internet banking payment gateway |
Infrastructure & Network
| Subprocessor | Location | Data Processed | Purpose |
|---|---|---|---|
| Cloudflare, Inc. | United States (global CDN) | IP addresses, HTTP request metadata, TLS certificates | DNS, DDoS protection, TLS termination, CDN, object storage (R2) |
Security
| Subprocessor | Location | Data Processed | Purpose |
|---|---|---|---|
| abuse.ch (MalwareBazaar) | Switzerland | SHA-256 hash of uploaded files (no file content transmitted) | Malware hash lookup for upload scanning (when enabled) |
Your Remote Servers
filemanager.bd connects to your own remote servers using credentials you supply. Files transferred through the platform travel directly between your browser and your servers via server-side SFTP — we do not store the contents of files you manage beyond temporary buffers used during upload/download operations.
Server credentials (passwords, private keys) are encrypted at rest using AES-256 (Fernet). The encryption key is never shared with any subprocessor.
Notification of Changes
We will update this list when we add or remove subprocessors. Significant changes that affect how personal data is handled will be communicated to account holders via email or an in-app notice at least 30 days before the change takes effect where possible.
Questions? Contact us at privacy@filemanager.bd or review our Vulnerability Disclosure Policy.