Skip to content
Log inTry it on your repoBook a live run
Book a live run
MenuClose

Sub-processors

Who we share your data with.

A short list. Every sub-processor is bound by a data processing agreement with Atlantic. We notify you 30 days before adding new ones.

Last updated: 2026-06-02. We will update this list at least 30 days before adding or replacing any sub-processor. Customers subject to a DPA may object to changes on legitimate data protection grounds. Questions? info@getatlantic.ai.

Sub-processors
Sub-processorPurposeData types processedRegion
Amazon Web Services (AWS) (opens in a new tab)Cloud hosting, compute, storage, and LLM inference via Amazon Bedrock (Anthropic Claude and OpenAI GPT models)All customer data at rest and in transit; LLM inference inputs/outputsUnited States (us-east-1 primary); Bedrock cross-region inference may serve model requests in other AWS regions
GitHub (opens in a new tab)Repository access through the GitHub App you install, and pull request deliveryRepository contents and metadata for the repositories you select; pull requests Atlantic opensPer GitHub's terms
Dodo Payments (opens in a new tab)Subscription billing and payment processingBilling contact details, plan, and PR credit usage; card details are handled by the processorPer Dodo Payments' terms
Supabase (opens in a new tab)Managed PostgreSQL database hostingStructured application data (user records, conversations, knowledge base metadata)EU (eu-central-1) and United States
PostHog (opens in a new tab)Product analytics and session replayUsage events, feature interaction data, session recordings (analytics only, consent-gated)European Union (EU Cloud)
Resend (opens in a new tab)Transactional email delivery (account notifications, security alerts, invoices)Email address, name, email contentUnited States

  • Amazon Web Services (AWS) (opens in a new tab)

    Purpose
    Cloud hosting, compute, storage, and LLM inference via Amazon Bedrock (Anthropic Claude and OpenAI GPT models)
    Data types processed
    All customer data at rest and in transit; LLM inference inputs/outputs
    Region
    United States (us-east-1 primary); Bedrock cross-region inference may serve model requests in other AWS regions

  • GitHub (opens in a new tab)

    Purpose
    Repository access through the GitHub App you install, and pull request delivery
    Data types processed
    Repository contents and metadata for the repositories you select; pull requests Atlantic opens
    Region
    Per GitHub's terms

  • Dodo Payments (opens in a new tab)

    Purpose
    Subscription billing and payment processing
    Data types processed
    Billing contact details, plan, and PR credit usage; card details are handled by the processor
    Region
    Per Dodo Payments' terms

  • Supabase (opens in a new tab)

    Purpose
    Managed PostgreSQL database hosting
    Data types processed
    Structured application data (user records, conversations, knowledge base metadata)
    Region
    EU (eu-central-1) and United States

  • PostHog (opens in a new tab)

    Purpose
    Product analytics and session replay
    Data types processed
    Usage events, feature interaction data, session recordings (analytics only, consent-gated)
    Region
    European Union (EU Cloud)

  • Resend (opens in a new tab)

    Purpose
    Transactional email delivery (account notifications, security alerts, invoices)
    Data types processed
    Email address, name, email content
    Region
    United States

No-training commitment

None of the sub-processors listed above train AI models on your data. AWS Bedrock does not use API inputs for model training. This is contractually guaranteed.

GDPR

All sub-processors are covered by Standard Contractual Clauses (SCCs) for EU/EEA data. Regional data residency is maintained where available.

Change notice

We will email active subscribers at least 30 days before adding or replacing a sub-processor. Enterprise customers may object per their DPA terms.