Last updated · May 6, 2026English is the authoritative version.
Subprocessors
The third-party services we rely on to run AltOrbit. Each one has a Data Processing Agreement on file with us, and we update this page whenever the list changes.
| Vendor | Purpose | Region of processing | DPA |
|---|---|---|---|
| Amazon Web Servicesaws.amazon.com | Primary cloud infrastructure — compute, storage, managed databases, backups | eu-central-1us-east-1 | DPA |
| Cloudflarecloudflare.com | CDN, DDoS protection, edge security, WAF | Global edge | DPA |
| Stripestripe.com | Payment processing, billing, tax calculation. Card data never touches our servers. | IrelandUSA | DPA |
| Resendresend.com | Transactional email — receipts, password reset, invites, security alerts | EU | DPA |
| Sentrysentry.io | Application error tracking. Configured with PII scrubbing and 30-day retention. | EU | DPA |
| PostHog(opt-in)posthog.com | Product analytics for the website — only active after cookie consent | USA | DPA |
| Twiliotwilio.com | SMS for 2FA fallback (only when the user enrolls SMS) | Ireland | DPA |
| Anthropic(opt-in)anthropic.com | AI features — only active when the workspace Owner opts in. Zero-retention agreement. | USA | DPA |
30-day notice on changesWe email all workspace Owners 30 days before adding any new subprocessor. If you object, you can terminate your subscription with a pro-rated refund for unused time.
Subscribe to changesGet an email any time this list changes — email us and we'll add you to the notice list.