Infrastructure
| Sub-processor | Service | Region |
|---|
| Amazon Web Services, Inc. | Application hosting, object storage, backups | EU-West (Ireland) / US-East (selectable per plan) |
| Cloudflare, Inc. | DDoS mitigation, CDN, DNS | Global edge |
| Sentry GmbH | Error monitoring (Customer-identifiable PII is scrubbed before send) | EU |
Source-tool integrations
The following are connected at your direction. We act as a processor for metadata returned by these services; the services themselves are not our sub-processors but are listed here for transparency.
| Provider | Data accessed |
|---|
| GitHub, Inc. | Repository, commit, PR, review, CI metadata |
| GitLab Inc. | Project, commit, MR, approval, pipeline metadata |
| Atlassian (Jira, Trello) | Issue, sprint, transition, board metadata |
| Linear Orbit, Inc. | Cycle, issue, project metadata |
| Mango Technologies, Inc. (ClickUp) | Task, list, sprint metadata |
| Figma, Inc. | Design file version, comment, and contributor metadata (file contents are not stored) |
| PagerDuty, Inc. | Incident event, severity, and resolution-time metadata (for DORA change-failure rate and MTTR) |
AI providers
| Provider | Use | Opt out |
|---|
| OpenAI, L.L.C. | Cloud LLM endpoint for Ask Nara and weekly narrative generation. | Corporate customers can choose the self-hosted AI driver (Ollama), so prompts stay inside their own infrastructure. |
Billing
| Provider | Service |
|---|
| Stripe Payments Europe, Ltd. | Card processing (we never see full card numbers) |
| PT Integrasi Pembayaran Digital (Duitku) | Payment gateway for IDR transactions (we never see full card numbers) |
Email
| Provider | Service |
|---|
| Postmark (ActiveCampaign LLC) | Transactional email (invitations, security notices, report delivery) |
Notification
Material changes (new sub-processors, removed sub-processors) are announced via in-app notice and at the top of this page 30 days before they take effect. To subscribe to updates by email, write to privacy@enginara.app.
