# Subprocessors

Canonical: https://plottypus.com/subprocessors

Last updated: 2026-10-22

> Every company that handles personal data for plottypus: what it does, what data it gets, and where. AWS Mumbai, Anthropic, Cloudflare, PostHog and others.

**These companies handle personal data for plottypus. Our server is in Mumbai. We email customers 30 days before adding or replacing one.**

Effective 22 October 2026. Version 2026-10-22.

## Processors

They act only on our instructions.

| Company | What it does | Personal data | Where |
|---|---|---|---|
| **Amazon Web Services** | Our API server, storage, review traces, backups, logs, product metrics, and what you share through Help improve plottypus | All service data: account id and email, machines, session data and traces, findings, usage, billing state, logs, product metrics; while sharing is on, scrubbed code snapshots and commits | India (Mumbai) |
| **Anthropic**, consumer Claude service under our own account, model training off. Until our first paying customer | AI model that reviews sessions, and replays shared sessions to test the reviewer | Parts of your sessions: prompts, diffs, file excerpts, tool output. Can include other people's data in your code | United States |
| **Anthropic commercial API or Amazon Bedrock**. Replaces the row above before we take the first payment | AI model that reviews sessions | Same as above | United States, or India (Mumbai) |
| **SurrealDB Cloud** | Accounts and sign-in database for plottypus.com | Account data, sign-in sessions (IP, user agent), beta and form answers, founding-seat payments, consent records | India (Mumbai) |
| **Vercel** | Hosts plottypus.com and its sign-in and form functions | Account data in transit, IP, request logs | Functions in India (Mumbai); US company |
| **Cloudflare** | DNS, the dashboard app, our analytics proxy, CLI update downloads, routing mail sent to us | IP and request data; anonymous visit counts in transit (unless you opt out); mail you send us | Global network |
| **PostHog** | Product metrics from our server (always on, no code or text, no IP), and anonymous visit counts on the site and dashboard (no cookies, opt-out under Privacy choices) | User id and product metric events with hashed paths; for visit counts, page views, device and browser type, and a daily-rotating visitor hash; IP addresses used for country and region, then discarded | United States |
| **Brevo** | Sign-in and service emails | Email address, name, email content | France |
| **Resend** | Fallback if Brevo is down | Email address, name, email content | United States |
| **GitHub** (releases) | Hosts CLI downloads | IP address of the download | United States |

While reviews run on Anthropic's consumer service, there is no data processing agreement with Anthropic. Anthropic's consumer terms and privacy policy apply, and it keeps the data 30 days with training off. See the [privacy policy](https://plottypus.com/privacy#model-processing-by-anthropic).

## Independent controllers

They decide how they use the data, under their own privacy policies.

| Company | What it does | Personal data | Where |
|---|---|---|---|
| **Razorpay** | INR payments, UPI Autopay and card mandates | Name, email, phone, payment details. We never see card numbers or UPI ids | India |
| **Paddle** (not live yet) | Merchant of record and seller outside India | Email, payment details, address for tax | United Kingdom |
| **GitHub** | Sign in with GitHub | Your GitHub profile, during sign-in | United States |
| **Google** | Sign in with Google | Your Google profile, during sign-in | United States |

## Not used

No advertising or data-broker services.

## Changes

| Date | Change |
|---|---|
| 14 October 2026 | First list |
| 14 October 2026 | PostHog also receives content-free product metrics from our server. AWS and Anthropic also handle what you share through Help improve plottypus. No new company |
| 22 October 2026 | Wording: anonymous visit counts are on unless you opt out, as the privacy policy says. No new company |