← All legal documents
Volcano Subprocessor List
The following are Volcano’s sub-processors of Customer personal data on behalf of Volcano customers. We will update this list whenever we add a new Sub-processor.
| Vendor | Purpose | Country Location(s) |
|---|---|---|
| AWS | S3 storage, Lambda execution, frontend delivery, build/orchestration, queues/cache, logs/metrics, SES email | United States (Ohio, us-east-2) for the Volcano control plane; customer-selected AWS region for workloads; support, edge delivery, email routing, and AWS subprocessors may operate in other listed locations |
| Neon | Managed customer Postgres | Customer-selected database region; Neon and its subprocessors may also process in the United States and other operating locations |
| PostHog (US) | Product/web analytics, session replay | United States (PostHog US Cloud); PostHog subprocessors may process in other listed locations |
| Datadog | Operational logging, metrics, tracing | United States hosting; Datadog support and subprocessors may process in other listed countries |
| Stripe | Subscriptions, hosted Checkout, invoices, webhook-driven billing state | United States and other countries determined by the customer, end customer, and Stripe service; Stripe affiliates and subprocessors operate globally |
| Plain | Customer support threads | United Kingdom (primary service endpoint); Plain subprocessors may process in other listed locations |
| GitHub | Volcano login, repo connection, source import, Git-triggered deploy, CLI/plugin distribution fallback | United States and other countries listed for GitHub subprocessors and affiliates |
| Federated login — Volcano dashboard and customer end-user apps | United States, Ireland, and other countries determined by the end user's region and service | |
| Microsoft, Apple | Customer end-user app federated auth | Global; varies by end-user location and identity-provider configuration, including the United States and Ireland |
| Vercel | Importing an existing Vercel project | United States (primary); other countries where Vercel or its subprocessors operate |
| Customer-selected SMTP provider | Transactional email for customer apps | Customer-selected provider and processing locations |
| npm registry / GitHub Releases | Distribution | United States; public packages and releases are delivered through global infrastructure |
| Have I Been Pwned (Superlative Enterprises Pty Ltd) | Compromised-password screening during password creation and changes | Western United States (Microsoft Azure); operated from Australia |