Sub-processors

These are the companies we use to provide OnProd that may process personal data our customers send us. Our data processing agreement authorises them, and each is bound by a written contract with data protection obligations. We store and process customer data in Australia; the table shows where each company processes it.

We give at least [30] days’ notice before adding or replacing a sub-processor, by updating this page and e-mailing workspace owners, and customers may object as the DPA describes.

Sub-processors

Company	What it does for OnProd	Data it handles	Where
Amazon Web Services [confirm the contracting entity: Amazon Web Services, Inc. or Amazon Web Services Australia Pty Ltd]	Hosting: servers, database, replay storage and backups	All customer data and account data	Australia (Sydney, ap-southeast-2)
Amazon Web Services (Amazon Simple Email Service)	Sending account e-mails from [email protected]: address verification, password resets, invitations, security, usage and billing notices	Account holders’ e-mail addresses and the messages we send them. No data from customers’ websites	Australia (Sydney, ap-southeast-2)
Cloudflare [confirm the contracting entity]	DNS for onprod.app, and the network every request to OnProd passes through on its way to our servers. Connections are encrypted from the browser to Cloudflare and from Cloudflare to our servers	All traffic to and from OnProd in transit, including IP addresses, dashboard pages and the data the OnProd script sends from customers’ websites	Worldwide: a Cloudflare data centre near each visitor or user
Amazon Web Services (Amazon Bedrock)	AI Insights, only for sites whose owner turned them on and chose Amazon Bedrock	Evidence about one issue at a time: short page timelines, page outlines and counts, including page text the site didn’t mask, without session or user IDs, IP addresses, locations or form values	Australia [confirm the region, and that requests are not routed outside Australia]
Anthropic, PBC	AI Insights, only for sites whose owner turned them on and chose the Anthropic API	The same evidence as above	United States
Stripe [confirm the contracting entity, for example Stripe Payments Australia Pty Ltd]	Subscription billing and card payments, once we turn them on	The workspace owner’s e-mail address and the workspace’s name, which we send, and the names, billing details and card details Stripe collects directly at checkout. No data from customers’ websites	Australia and the United States [confirm]
Logo.dev [confirm the contracting entity]	Site logos beside each site’s name in the dashboard (Logos provided by Logo.dev), once we turn them on. The browser of the person using the dashboard loads each logo straight from Logo.dev	The domain names of customers’ sites, and the IP address and browser of each person viewing the dashboard. No data from customers’ websites or their visitors	United States [confirm]

Sign-in providers

Once we offer it, if you choose to sign in to OnProd with Google, GitHub or Microsoft, that provider confirms who you are and shares your name, e-mail address and account ID with us. They receive no data from your sites. They act under their own privacy policies rather than as our sub-processors, and we list them here so the picture is complete. Signing in with an e-mail address and password involves none of them.

What isn’t sent anywhere

• A visitor’s country comes from Cloudflare, which already carries the request, or from DB-IP’s free database copied onto our own servers; their network comes from DB-IP’s database too. No visitor data is sent to DB-IP.
• The public pages of onprod.app load no third-party scripts, fonts or images.
• A site whose owner turns AI Insights off sends no data to Anthropic or Amazon Bedrock.

Changes

• 24 October 2026: first version.