Who processes what
| Company | What they do for us | Data involved | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting of our systems: the build phase of the work, the working copies of projects, the client portal and its database, the emails our systems send | Your code and tickets, portal accounts, emails | United States (Ohio) |
| Anthropic, PBC | The AI models that write and test the code | Your code and the descriptions of your tickets | United States |
| GitHub, Inc. | Hosting of a new app’s repository until it is transferred to you | Your code | United States |
| Cloudflare, Inc. | Hosting of this website and its visit counts (without cookies), domain names, and the network protection in front of the client portal | Network traffic to the website and the portal | Worldwide network |
| WorkOS, Inc. | Sign-in to the client portal | Names and email addresses of portal users | United States |
| Stripe, Inc. and its affiliates | Payments and invoices | Billing details | United States |
| Google LLC (Google Workspace) | Our mailboxes, including the requests sent from the website | Requests and correspondence | United States |
Where your code is processed
Your code is processed in two places only: at Amazon Web Services in the United States (Ohio), and on our own machines in Thailand, which we operate ourselves. We work on your code, never on your live customer data.
Transfers outside the European Economic Area
All the companies above are outside the European Economic Area, and so are we. Transfers rely on the European Commission’s standard contractual clauses, or, for a company certified under it, on the EU–US Data Privacy Framework.
Changes to this list
We inform our clients before we add or replace a company that processes their data, so they can raise an objection. Earlier versions of this list are available on request.