Subprocessorseveryone named
Everyone else who touches it.
A complete list of the third parties that may process customer personal data, what each one does, and where. You are told before this list changes, and you may object — that commitment is in the addendum, not only on this page.
Last updated 13 September 2026
The list
Named, with what they do.
Complete this table before launch: one row per subprocessor — legal entity, what it processes, which region, and the transfer mechanism. An incomplete list here is worse than no page, because the commitment above is a contractual one.
- Hosting and infrastructure
provider, entity, regions
- Model providers
providers, regions, retention terms — see also AI governance.
- Transactional email
provider and region
- Error and performance monitoring
provider, or state that none is used
- Payments
provider, or state that none is used
- Support tooling
provider, or state that support is email only
Staying told
You hear before it changes.
To be notified when this list changes, write to hello@debuginit.com and ask to be added. Notice is given notice period, e.g. 30 days before a new subprocessor begins processing, which is the window in which you may object.