Subprocessors

Graphide uses these companies to run the service. Each receives only what it needs for its part. This is the list in section 11 of the Privacy Policy, which says when it changes.

Who	What they receive	Where
GitHub	The GitHub App reads your repositories from GitHub and posts checks and reviews back to it	United States
Microsoft Azure	Hosts our servers and the machines that build and test your code, and therefore everything on them	United States
Supabase	Sign-in, your account identity, and the service’s database	United States
Anthropic	The changes under review and the code around them, to write pull request reviews; and the code we work on to speed up your CI. Anthropic does not train on API data	United States
OpenAI	The code we work on to speed up your CI, under settings that do not allow training	United States
OpenRouter and Straitly, and the model hosts they route to	Short excerpts of your code (at most a few kilobytes per function), to write descriptions and pick the code relevant to a question. Requests through OpenRouter ask it to use only hosts that do not keep the data for their own use or train on it. Straitly does not store prompts or answers and does not train on them, and bars its hosts from doing so	United States, and the hosts’ own regions
DeepInfra, through OpenRouter	The code of each function, with its name masked, to compute embeddings, with zero data retention routing	United States
Depot	For repositories whose tests also run on macOS: the repository at the commits being tested, on a machine started for that job and discarded when it ends	United States
Cloudflare (Turnstile)	On the sign-in page only: your IP address and browser details, to check you are a person	Global
Stripe	Your purchase and payment, as the seller of record	United States
Sentry	Error reports from our own servers	United States
Google (Firebase Cloud Messaging), or the UnifiedPush service you choose	For the phone app: the push address and, with each notification, which agent and computer changed (identifiers only)	United States, or varies

The AI model providers receive your code only for the work you asked for, and only on terms, or with request settings, under which they may not train on it.