Sub-processors
Last updated: January 30, 2025
supportpages.io uses the following third-party sub-processors to provide our services. These companies process data on our behalf under contractual obligations that protect your data.
Current Sub-processors
| Company | Purpose | Location | Data Processed |
|---|---|---|---|
| Anthropic | AI analysis and documentation generation | USA | Source code (temporarily), project context |
| Cursor | AI analysis and documentation generation (alternative engine, selectable per project) | USA | Source code (temporarily), project context |
| OpenAI | AI analysis and documentation generation (alternative engine, selectable per project) | USA | Source code (temporarily), project context |
| GitHub | Authentication, repository access, webhooks | USA | User identity, repository metadata, code diffs |
| Hetzner | Cloud infrastructure and hosting | Finland (EU) | All stored data |
| Cloudflare | DNS, custom domains, SSL certificates | Global | Domain names, traffic routing |
| ElevenLabs | Text-to-speech narration for video walkthroughs (only when narration is enabled) | USA | Walkthrough narration text |
| Rollbar | Error monitoring and alerting | USA | Error logs (sensitive data filtered) |
Sub-processor Details
Anthropic
Website: anthropic.com
Privacy Policy: anthropic.com/privacy
Anthropic provides the AI that powers our documentation generation. When you analyze code:
- Your code and context are sent to Anthropic for analysis
- Anthropic processes the data to generate documentation
- Data is not retained after processing
- Data is not used to train AI models
Data Processing Agreement: Yes
Transfer Mechanism: Standard Contractual Clauses
Cursor
Website: cursor.com
Privacy Policy: cursor.com/privacy
Cursor is an alternative AI engine that can power documentation generation. Each project
chooses which engine it uses in its AI settings. When a project is set to use Cursor:
- Your code and context are sent to Cursor for analysis
- Cursor processes the data to generate documentation
- Data is not retained after processing
- Data is not used to train AI models
Data Processing Agreement: Yes
Transfer Mechanism: Standard Contractual Clauses
OpenAI
Website: openai.com
Privacy Policy: openai.com/privacy
OpenAI is an alternative AI engine that can power documentation generation. Each project
chooses which engine it uses in its AI settings. When a project is set to use OpenAI (Codex):
- Your code and context are sent to OpenAI for analysis
- OpenAI processes the data to generate documentation
- Data is not retained after processing
- Data is not used to train AI models
Data Processing Agreement: Yes
Transfer Mechanism: Standard Contractual Clauses
GitHub
Website: github.com
Privacy Policy: docs.github.com/privacy
GitHub provides authentication and repository access:
- OAuth authentication for user sign-in
- GitHub App for repository integration
- Webhooks for PR/commit notifications
Data Processing Agreement: GitHub DPA applies
Transfer Mechanism: EU-US Data Privacy Framework, Standard Contractual Clauses
Hetzner
Website: hetzner.com
Privacy Policy: hetzner.com/privacy
Hetzner hosts our infrastructure in Finland:
- Database storage
- Application servers
- File storage
Location: Finland (within EU)
Data Processing Agreement: Yes
GDPR Compliant: Yes (EU-based)
Cloudflare
Website: cloudflare.com
Privacy Policy: cloudflare.com/privacy
Cloudflare provides DNS and custom domain functionality:
- DNS management
- Custom hostname SSL certificates
- Traffic routing
Data Processing Agreement: Yes
Transfer Mechanism: Standard Contractual Clauses, EU representative designated
ElevenLabs
Website: elevenlabs.io
Privacy Policy: elevenlabs.io/privacy
ElevenLabs provides text-to-speech narration for video walkthroughs. It is used only when
narration is enabled for a walkthrough:
- The narration script (generated text, not your source code) is sent to ElevenLabs
- ElevenLabs returns an audio file used in the walkthrough
- Your source code is not sent to ElevenLabs
Data Processing Agreement: Yes
Transfer Mechanism: Standard Contractual Clauses
Rollbar
Website: rollbar.com
Privacy Policy: rollbar.com/privacy
Rollbar monitors errors in our application:
- Error tracking and alerting
- Stack traces and debugging info
- Note: We filter sensitive data (tokens, code) from error logs
Data Processing Agreement: Yes
Transfer Mechanism: Standard Contractual Clauses
Changes to Sub-processors
We'll notify you before adding or changing sub-processors:
- Update this page at least 30 days before the change
- Email notification (if you've opted in to legal updates)
- Right to object within 30 days of notification
If you have concerns about a sub-processor change, contact us at dpa@supportpages.io.
Subscribe to Updates
Want to be notified of sub-processor changes?
Email dpa@supportpages.io with subject line "Subscribe to sub-processor updates" and we'll add you to our notification list.
Questions
If you have questions about our sub-processors or their data handling practices, contact us at privacy@supportpages.io.
This list is current as of the "Last updated" date above. Check back or subscribe for updates.