| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic | AI conversations & PRD generation | Conversation messages, project context | United States |
| OpenAI | Text embeddings for semantic search (RAG) | Node content, messages | United States |
| Vercel | Application hosting, file storage, web analytics | All application data, uploaded files | United States |
| Neon | Managed PostgreSQL database | All persisted data | United States |
| PostHog | Product analytics & error tracking | Usage events, user identity | European Union (Frankfurt) |
| GitHub | OAuth authentication, repository integration | Auth tokens, repository code | United States |
| Stripe | Payment processing | Billing information, email | United States |
| Langfuse | AI observability & tracing | AI request traces, token usage | European Union (Germany) |
| Botcruncher | Bot detection & ad fraud prevention | Traffic patterns, IP metadata, behavioral signals | European Union |
Last updated: April 4, 2026
We will update this page when subprocessors change and notify affected customers by email at least 30 days in advance of any new subprocessor being engaged.
Questions? Contact us at privacy@getkommit.ai