Sub-processors
Sub-processors of customer log data
| Sub-processor | Purpose | Location of processing | Safeguards |
|---|---|---|---|
| Amazon Web Services, Inc. | All hosting, storage and compute for the Service. | Storage and primary processing: UK (eu-west-2, London). For customers ingesting via AWS CloudFront, log records transit AWS US infrastructure (us-east-1) before storage in London. | AWS GDPR Data Processing Addendum; EU SCCs + UK Addendum; EU-US Data Privacy Framework participant. |
| Anthropic, PBC | Optional AI features only: the dashboard chat assistant and AI alert summaries. Receives queries and derived analytics results needed to answer them. | United States | Anthropic Commercial Terms & DPA (SCCs); API inputs/outputs not used for model training. These features can be disabled for your organisation on request, in which case no data flows to Anthropic. |
Service providers that never receive log data
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe, Inc. | Subscription billing | Account owner name, email, payment details. No visitor log data. |
| Amazon SES (AWS) | Transactional email (alerts, invitations, notices) | Recipient email addresses and alert summaries you configure. No raw log data. |
| Google LLC | Search Console integration, only if you connect it | OAuth tokens (encrypted in AWS Secrets Manager) and Search Console metrics fetched on your behalf. Subject to Google's API Services User Data Policy (Limited Use). |
Change log
Version 1.0, initial publication of this list.