Last updated: 2026-10-03
Subprocessors
Third-party companies that process personal data for us to provide the Service.
Current subprocessors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Paddle.com Market Ltd | Payments, invoicing, tax (Merchant of Record) | Billing name, email, address, payment details, transaction data | UK / EU / US |
| Hetzner Online GmbH | Hosting the application, database, cache and stored files | All Service data | Germany (European Union) |
| Resend | Sending service emails | Email address, email content | US |
| Anthropic, PBC (only when AI features are enabled) | Generating AI analysis for fix prompts and summaries | Redacted scan findings (no account details or secrets) | US |
| GitHub, Inc. (only if you connect GitHub) | Repository analysis you request | GitHub account name, repository metadata, access token | US |
| Cloudflare, Inc. | DNS, content delivery, DDoS protection, forwarding of emails sent to our support addresses | IP address, request metadata; emails you send us | Global |
| Google LLC (Gmail) | Mailbox where we read and answer support, privacy and security emails | Emails you send us and our replies | US / EU |
| Functional Software, Inc. — Sentry (if enabled) | Error monitoring | Technical error reports with personal data removed | US / EU |
We update this list before adding a new subprocessor. Business customers who need a Data Processing Agreement can request one at [email protected].