Subprocessors

Last updated: 2026-05-16

Subprocessors are third-party companies that may process customer data on our behalf as part of delivering the CodeDig service. The table below reflects our current production state.

Subprocessors used by CodeDig as of the last-updated date
VendorService ProvidedData Categories HandledRegionStatusDate Added
Fly.ioApplication hosting (compute, logs)Code submitted for analysis (in-memory, ephemeral), application logs, customer account dataUS (iad primary); LHR/NRT optionalActive2025-09
NeonManaged Postgres (primary data store)Customer account data, organization/team data, analysis findings metadata, audit logs, billing recordsUSActive2025-09
GitHubOAuth, GitHub App, repo metadata fetchOAuth user id + email, installation metadata, repository names, pull request payloadsUSActive2025-09
GitLabOAuth, repo metadata fetch (when customer connects GitLab)OAuth user id + email, project metadata, MR payloadsUS/EU (gitlab.com)Active2025-09
StripeSubscription billing, payment processing, customer portalBilling email, payment method metadata, subscription/invoice recordsUSActive2025-09
SendGrid (Twilio)Transactional email (sign-up, billing, alerts)Recipient email, message contentUSActive2025-09
OpenAILLM inference for AI-assisted analysisCode snippets and file paths submitted for analysisUSActive2025-09
AnthropicLLM inference (alternative provider)Code snippets and file paths submitted for analysisUSActive2026-02
SentryError tracking and performance telemetryStack traces, request metadata, IP address (truncated), user idUSActive2026-05
Plausible AnalyticsAggregate, cookie-less site analyticsAggregate page-view metrics, country, device class (no IPs stored)EUActive2025-09

Change notice

We publish updates to this list at least 30 days before adding a new subprocessor, except where a change is required urgently for security reasons. Subscribers to the mailing list below will be notified by email before any change takes effect.

Subscribe to changes

Enter your email address to receive advance notice whenever this list is updated.

Questions?

For questions about our subprocessors or data handling practices, contact us at security@codedig.ai.