Trust
Subprocessors
Last updated
1Current subprocessors
| Subprocessor | What it does | What reaches it | Location |
|---|---|---|---|
| Anthropic PBC | Writes documentation prose and answers Ask-the-docs questions | The relevant part of your OpenAPI spec, matching documentation passages, and reader questions | United States |
| OpenAI, L.L.C. | Generates the vector embeddings that power documentation search, and can be selected as the documentation-writing model | Documentation text and, when selected as the writing model, spec content | United States |
| Paddle.com Market Ltd | Merchant of record: takes payment, issues invoices and receipts, and handles sales tax and VAT | Name, email address, billing address, payment details, transaction history | United Kingdom |
| Cloudflare, Inc. | Object storage for generated SDK artifacts and uploaded assets, plus DNS and certificates for custom documentation domains | Generated SDK packages, logos and images you upload, DNS records for domains you connect | United States, with a global edge network |
| Resend (Plus Five Five, Inc.) | Delivers transactional email: verification, password resets, invitations, billing and usage notices | Recipient name and email address, and the content of the message | United States |
| GitHub, Inc. | Sign-in with GitHub, spec synchronisation from repositories you connect, and Git-tag publishing of generated SDKs | Your GitHub account identifier, and metadata for the repositories you authorise | United States |
| Google Ireland Limited | Google Tag Manager and Google Analytics 4 on the marketing site: how pages are found and read | IP address, which Analytics truncates before storing, user agent, pages viewed and referrer, against a random cookie identifier. Only for visitors who allow the analytics category | Ireland, with processing in the United States |
| Vercel Inc. | Hosts and rebuilds our marketing site and blog | Published marketing content. No customer project data is sent | United States |
| Slack Technologies, LLC | Delivers internal operational alerts to our own team | Alert metadata such as organisation name and a metric that crossed a threshold. No customer content | United States |
Each of these is bound by a written agreement limiting them to processing on our instructions, with confidentiality and security obligations, and with the Standard Contractual Clauses where personal data leaves the EEA or the UK.
2What is deliberately not on this list
Some things you might expect to see are absent, for good reasons:
- Our databases. MongoDB, Redis and the message broker are self-hosted rather than rented from a managed provider, so your content is not handed to a database vendor.
- Advertising. There is none: no ad pixels, no remarketing tags, and nothing sold or shared for advertising, anywhere. Analytics is narrower than it usually is, too — Google Tag Manager and Analytics 4 run on the marketing site alone and only for visitors who allow them, never in the dashboard and never on the documentation sites we host for you. See the Cookie Policy.
- A third-party support or chat widget. Support runs on email.
- Stripe. The integration exists in the codebase as a fallback payment provider but is not active. Paddle takes every payment today. If that changes, this page changes with it, and we will give notice first.
3Services you connect yourself
These are not our subprocessors. Data reaches them because you asked for it, using your credentials, and your relationship is with them directly:
- Package registries: npm, PyPI, Maven Central, crates.io, RubyGems, Packagist and pub.dev, when you publish generated SDKs to them.
- Your DNS provider, when you point a custom domain at your documentation.
- Your identity provider, when you configure SAML single sign-on.
- Your own application, which decides what it sends to monitoring.
You can disconnect any of them at any time from your project or organisation settings.
4Changes and notification
We keep this page current. Before we add a subprocessor that will handle customer content or personal data, we will post the change here and email account owners at least 30 days in advance, so there is time to object.
This page is Annex III to our Data Processing Agreement, which is in force for every customer. You may object to a new subprocessor on reasonable data-protection grounds within the 30-day notice period, on the terms in section 8 of that agreement. Write to founders@octri.dev, or to support@octri.dev for anything else about this page.