Subprocessors and data processing¶
Current as of July 28, 2026.
These providers can process personal data when GaugeWright supplies the related hosted function. A customer-selected identity or model provider can act under the customer's configuration and its own agreement.
| Provider | Purpose | Data involved | Processing location |
|---|---|---|---|
| Microsoft Azure | Hosted compute, network, storage, managed secrets, monitoring, and attestation | Hosted customer content, account and audit metadata, encrypted secrets | United States; configured Azure region |
| Cloudflare | DNS, edge delivery, static hosting, and managed runtime | IP and device request data; deployment content and service metadata where enabled | Global network |
| GitHub | Source control, build automation, security scanning, release artifacts, and operational alert issues | Source and build metadata; sanitized operating evidence; no intended customer workspace payload | United States and global service |
| Company email, scheduling, support, and optional identity federation | Business contact and support data; identity claims when selected | United States and global service | |
| Stripe | Payment and subscription processing | Billing contact, transaction, and subscription identifiers; Stripe handles payment credentials | United States and global service |
| Infisical | Managed Machine-secret storage and delivery | Service credentials and configuration secrets; no intended customer workspace payload | United States |
| Customer-selected model provider | AI inference requested by an authorized user | Prompts and allowed context | Provider and customer configuration |
| Customer-selected identity provider | Authentication and group or role claims | Identity, authentication, and authorization claims | Provider and customer configuration |
Data Processing Agreement¶
GaugeWright offers a standard DPA. Request it through support.
Changes and objections¶
GaugeWright reviews a new critical subprocessor before customer data reaches it. GaugeWright updates the public list and provides the applicable change notice.
Email [email protected] with a question or documented objection.
The public legal pages at gaugewright.com/subprocessors and gaugewright.com/dpa contain the current published legal text.