Sub-processors
The service providers Autom8 SRL engages to process customer data on its behalf, as authorised in Schedule A of our Data Processing Agreement. Customers are notified of changes in advance, as set out in the DPA.
Effective: 1/09/2026
| Category | Sub-processor | Service | Location of processing |
|---|---|---|---|
| Hosting | Scaleway SAS | Cloud infrastructure hosting the Platform and its database | France (EU) |
| AI model provider | Anthropic Ireland, Ltd | Large-language-model API used to generate review output | EEA and United States (EU SCCs; no training on customer data) |
| Payments | Stripe (Stripe Payments Europe, Ltd) | Payment processing and invoicing; Stripe processes cardholder data as an independent controller for its own compliance obligations | EEA and United States (EU SCCs) |
| Product analytics | PostHog (PostHog, Inc.) | Usage analytics. For the Platform: events, clicks and page URLs (which include repository and pull request identifiers but never code content), for Users who have consented. For the public marketing site: cookieless, aggregate traffic measurement with no cookie, no device storage and no individual profile | EU (PostHog Cloud, EU region) |
| Transactional e-mail | Google (Google Ireland Ltd — Google Workspace) | Sending service e-mails | EEA, with possible global processing under Google's Cloud Data Processing Addendum (EU SCCs) |