Sub-
processors
The third parties that process personal data for Stategraph, what each one does, and where.
Sub-processors
Last Modified: 10 November 2026
About This List
Terrateam B.V., trading under the name Stategraph, Bickerswerf 19, 1013 KV Amsterdam, the Netherlands, uses the sub-processors below to provide Stategraph Cloud, support customers, process payments, and run its business systems.
Each sub-processor processes personal data only for the purpose listed. Stategraph requires each one to keep appropriate technical and organizational security measures and to comply with applicable data protection law.
For Stategraph BYOC, the cloud provider that Customer designates is not a sub-processor of Stategraph. Customer keeps the direct relationship with that provider.
Current Sub-processors
| Sub-processor | Purpose | Categories of data processed | Processing location |
|---|---|---|---|
| Google Cloud Platform | Infrastructure hosting (compute, database, storage) | Account data, repository and run metadata, plan output, run logs | Germany (Frankfurt) |
| Northflank | Deploys and runs the Stategraph Cloud application on Google Cloud | Account data, repository and run metadata, plan output, run logs, application logs | Germany (Frankfurt) |
| Cloudflare | Serverless functions that handle AWS Marketplace sign-ups | AWS Marketplace customer identifiers, contact details, request metadata | Global |
| GitHub | Source code hosting and authentication (GitHub OAuth) | User identifiers, account metadata, repository metadata | US |
| GitLab | Authentication (GitLab OAuth) | User identifiers, account metadata | Global |
| Stripe | Billing and payment processing | Billing information, payment metadata | Global |
| HubSpot | Customer relationship management and communications | Contact details, company information, email communications | US |
| Slack | Customer support and internal communications | Email addresses, message content, support communications | US |
| PostHog | Product analytics and session recording for the web app | Product usage events, session recordings of the web app, IP addresses, account identifiers | EU |
| Google Workspace | Email and internal communications | Email addresses, communication metadata | US / EU |
| Vercel | Website and documentation hosting | Website request metadata, IP addresses | Global |
| Sentry | Error monitoring and session replay for the web app | Error reports, browser and device metadata, user identifiers, session replays of the web app | Germany |
| MailerSend | Email notifications for AWS Marketplace sign-ups | Contact details, company information, AWS account identifiers | EU (Belgium) / US |
Changes to This List
Stategraph updates this page when it adds or replaces a sub-processor. Stategraph informs Customer of changes as set out in article 14.10 of the General Terms and Conditions and in any Data Processing Addendum between Stategraph and Customer. Customer has the right to object to a change.
How To Reach Us
For questions about this list, contact privacy@stategraph.com.