# Subprocessors

Legal

# Subprocessors

OllyGarden, Inc. | Last Updated: September 25, 2026

OllyGarden, Inc. uses the third parties below to process customer data, such as telemetry, source code, and account information, on our behalf. Each is bound by a data processing agreement. Transfers outside the European Economic Area rely on the EU-U.S. Data Privacy Framework where the provider is certified, on an adequacy decision, or on the European Commission's Standard Contractual Clauses.

We update this list before a new subprocessor begins processing customer data. To be notified of changes, email [[email protected]](/cdn-cgi/l/email-protection#cab9bfbabaa5b8be8aa5a6a6b3adabb8aeafa4e4a9a5a7f5b9bfa8a0afa9bef799bfa8bab8a5a9afb9b9a5b8eff8fabfbaaeabbeafb9) with the subject “Subprocessor updates”. How we handle personal data is described in our [Privacy Policy](/privacy-policy).

## Platform infrastructure

Used by Insights, Rose, and Tulip to host and operate the OllyGarden platform.



| Subprocessor | Purpose | Location |
| --- | --- | --- |
| Google Cloud Platform | Hosting, storage, and encryption keys for the platform and telemetry analysis | Netherlands (europe-west4) |
| Amazon Web Services | Cloud infrastructure | Germany (eu-central-1) |
| Supabase | Application database | Germany (eu-central-1), Sweden (eu-north-1) for Rose |
| ClickHouse | Telemetry analysis database | Netherlands (Google Cloud europe-west4) |
| Cloudflare | DNS, network protection, and the Rose control plane | Global network; Rose workloads in the EU |
| Netlify | Delivery of the web application | United States, global edge network |
| Clerk | User authentication | United States |
| Stripe | Billing and payment processing | United States |
| Resend | Transactional email | United States |
| PostHog | Product analytics, session recordings with masked text, and error monitoring | EU (Germany) |
| Datadog | Monitoring of our own services; Rose traces can include excerpts of analyzed code | EU |
| Google (Gemini API) | AI-generated summaries of Insights findings | United States |
| Grafana Labs | Monitoring of our own services and on-call alerting | United Kingdom (London) |



## Rose

Used only when Rose analyzes a connected repository.



| Subprocessor | Purpose | Location |
| --- | --- | --- |
| E2B | Isolated sandboxes that clone and analyze repositories | United States (us-west-1) |
| OpenRouter | Routing of AI model requests | United States |
| Amazon Web Services (Bedrock) | Anthropic Claude model inference | United States |
| OpenAI | AI model inference for follow-up reviews, through OpenRouter | United States |
| Langfuse | Tracing of AI requests and responses | EU |



## Support and business operations

Used when customers contact us or work with our team.



| Subprocessor | Purpose | Location |
| --- | --- | --- |
| Google Workspace | Email and documents | United States, EU |
| Slack | Shared support channels and internal communication | United States |
| HubSpot | Customer relationship management | United States, EU |



Canonical URL: https://ollygarden.com/subprocessors