Last updated: 2026-05-16
Subprocessors are third-party companies that may process customer data on our behalf as part of delivering the CodeDig service. The table below reflects our current production state.
| Vendor | Service Provided | Data Categories Handled | Region | Status | Date Added |
|---|---|---|---|---|---|
| Fly.io | Application hosting (compute, logs) | Code submitted for analysis (in-memory, ephemeral), application logs, customer account data | US (iad primary); LHR/NRT optional | Active | 2025-09 |
| Neon | Managed Postgres (primary data store) | Customer account data, organization/team data, analysis findings metadata, audit logs, billing records | US | Active | 2025-09 |
| GitHub | OAuth, GitHub App, repo metadata fetch | OAuth user id + email, installation metadata, repository names, pull request payloads | US | Active | 2025-09 |
| GitLab | OAuth, repo metadata fetch (when customer connects GitLab) | OAuth user id + email, project metadata, MR payloads | US/EU (gitlab.com) | Active | 2025-09 |
| Stripe | Subscription billing, payment processing, customer portal | Billing email, payment method metadata, subscription/invoice records | US | Active | 2025-09 |
| SendGrid (Twilio) | Transactional email (sign-up, billing, alerts) | Recipient email, message content | US | Active | 2025-09 |
| OpenAI | LLM inference for AI-assisted analysis | Code snippets and file paths submitted for analysis | US | Active | 2025-09 |
| Anthropic | LLM inference (alternative provider) | Code snippets and file paths submitted for analysis | US | Active | 2026-02 |
| Sentry | Error tracking and performance telemetry | Stack traces, request metadata, IP address (truncated), user id | US | Active | 2026-05 |
| Plausible Analytics | Aggregate, cookie-less site analytics | Aggregate page-view metrics, country, device class (no IPs stored) | EU | Active | 2025-09 |
We publish updates to this list at least 30 days before adding a new subprocessor, except where a change is required urgently for security reasons. Subscribers to the mailing list below will be notified by email before any change takes effect.
Enter your email address to receive advance notice whenever this list is updated.
For questions about our subprocessors or data handling practices, contact us at security@codedig.ai.