| Subprocessor | Entity / Address | Purpose | Data Categories | Location | Safeguard |
|---|---|---|---|---|---|
| GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA | OAuth authentication | Email address, profile name, avatar and account identifiers | USA | SCCs (EU-US DPF) | |
| Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Cloud infrastructure and social sign-in | OAuth profile, encryption key management data, generated artifacts and workflow metadata | USA (cloud data hosted in Germany, Belgium and Netherlands) | SCCs (EU-US DPF); OAuth n/a | |
| Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany | Execution hosting | Customer flow payloads, integration credentials during execution and execution logs | Germany | n/a (EU) | |
| Databricks Inc., 160 Spear Street, 15th Floor, San Francisco, CA 94105, USA | Managed Postgres database hosting | Account, organization, flow, credential, run and application records | USA (data hosted in Germany) | SCCs (EU-US DPF) | |
| OpenAI OpCo, LLC, 1455 3rd Street, San Francisco, CA 94158, USA | AI model processing | Prompts, outputs and related account identifiers sent for AI features | USA | SCCs | |
| Polar Software, Inc., 548 Market Street PMB 61301, San Francisco, CA 94104-5401, USA | Billing and merchant-of-record services | Billing identity, subscription, invoice and payment metadata | USA | SCCs | |
| PostHog, Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA | Product analytics and exception capture | Product events, pseudonymous user identifiers, exception events and optional session data | USA | SCCs (EU-US DPF) | |
| Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA | Transactional email delivery | Recipient names, email addresses and transactional message content | USA (sending domain in Ireland) | SCCs (EU-US DPF) | |
| Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA | Error monitoring | Error events, stack traces, request URLs, user identifiers and incidental diagnostic data | USA | SCCs (EU-US DPF) | |
| Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA | Hosting and serverless compute | HTTP requests, session cookies, auth tokens, request logs and runtime configuration data | USA (functions in Germany) | SCCs (EU-US DPF) | |
| Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA | Network security and DNS/TLS | HTTP traffic in transit including session cookies, access logs | USA (global edge) | SCCs (EU-US DPF) |
Changes to this list are published here in reverse-chronological order.
Use the form below to get notified by email whenever we add, replace or remove a subprocessor, with at least 30 days advance notice where practicable.
Receive an email when we add, replace, or remove a subprocessor. We'll give at least 30 days notice where practicable. You can unsubscribe at any time.