Legal ProductAtlas
Subprocessors
The providers ProductAtlas relies on to run the service, and the data each one processes on our behalf.
1Current subprocessors
Each provider below processes data under contract, only on our instructions, and only for the purpose listed. Our application infrastructure runs in Microsoft Azure's Central US region in Iowa, United States. Cloudflare serves cached content from a global edge network by design, so request metadata is handled at the location nearest the visitor.
| Provider | Purpose | Data processed |
|---|---|---|
| BeyondAuth (opsAI LLC) | Hosted identity provider for sign-in, credential storage, and account provisioning. | Email address, name, password credentials, and authentication events. |
| Microsoft Azure | Application hosting, container registry, and managed key vault for secrets. | All application data in transit and at rest within our services, plus operational logs. |
| RavenDB Cloud | Managed database for application documents. | Account records, Blueprint Drafts and Releases, asset metadata, audit events, and analytics records. |
| Cloudflare | DNS, CDN, web application firewall, ingress tunnelling, object storage for assets, and static site hosting. | Request metadata including IP address, and uploaded asset files. |
| Mailgun (Sinch) | Delivery of transactional email such as address verification and invitations. | Recipient email address and message content. |
| Google (Gemini API) | Optional metadata suggestions requested by an author while editing a Draft. | The Draft text submitted for that request, sent with prompt storage disabled. |
2Processing we do not outsource
Content safety screening runs inside our own infrastructure. The malware, secret-detection, and sensitive-data engines execute alongside our worker processes, so uploaded files and Blueprint content are not sent to a third-party scanning service.
We do not use a third-party product analytics platform. Usage measurement is computed and stored in our own database.
3Changes to this list
We keep this page current as providers change. To be told about additions in advance, email [email protected] and we will add you to the notification list.
How and why we share data with these providers is explained in the Privacy Policy.