Sub-processors

Always used

• Amazon Web Services — hosting, encryption keys (KMS), backups, email delivery, and the cross-account access to customers' AWS accounts. Region: Asia Pacific.
• MongoDB Atlas — the databases holding platform and workspace data, in the workspace's data region.

Used when the feature is on

• Stripe — payments, invoices and the billing portal (when online billing is enabled).
• Anthropic — the Ask Vantiqo AI assistant (when the workspace uses it).
• Sentry — error reports about the service itself, without customer data (when enabled).
• Google Safe Browsing and Certificate Transparency logs (crt.sh) — reputation and certificate checks of the customer's own domains (when the customer uses domain monitoring).

Chosen by the customer

Alerting and collaboration services the customer connects — for example Slack, Microsoft Teams, Google Chat, Telegram, PagerDuty, Opsgenie, email, webhooks — receive the alerts the customer routes to them, under the customer's own agreements with them. The customer's cloud providers are its own suppliers, not our sub-processors.

Changes

We give workspace administrators 30 days' notice before adding a sub-processor (Data Processing Agreement).