DevAI Suite Subprocessors
DevAI Suite is an AI platform providing API, web application, and background worker services with document processing, AI inference, and analytics capabilities.
- Subprocessors
- 20
- Locations
- 14
- Categories
- 9
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Fly.io | Cloud Infrastructure | Runs the API, web application, and background workers | EU (Frankfurt) | Customer Data in transit, application logs, account data |
| Neon | Database | Managed PostgreSQL + pgvector; tenant data at rest with Row-Level Security isolation and RAG vector storage | EU (Frankfurt aws-eu-central-1) | All Customer Data at rest |
| Cloudflare | Cloud Infrastructure | CDN / Object Storage / Bot Protection / AI Embeddings; R2 object storage, DNS and edge delivery, Turnstile CAPTCHA, marketing site, operator console, Workers AI vector embeddings | R2: EU jurisdiction. Edge: global. Workers AI: Cloudflare network no region choice | Uploaded documents & templates, full database dumps, request metadata and IP address, challenge tokens, operator-console records; document text chunks and search queries |
| Upstash | Database | Redis cache, rate-limit counters, and real-time message fan-out between API machines |
 United States
|
Rate-limit keys (IP address, user ID), short-lived cached values and messages |
| GitHub | Developer Tools | Hosts source code and CI; nightly database dump and monthly restore drill run on GitHub-hosted runners | GitHub-hosted runners (region not selectable) | A full copy of the production database, held on the runner for the length of those jobs |
| Together AI | AI | Default LLM inference, image understanding, and speech-to-text; training of a per-organization adapter when a fine-tune runs | United States (vendor-hosted API) | Prompts and retrieved snippets, tool results, images, recorded audio, model outputs; organization correction pairs during fine-tune with consent, deleted when job ends |
| Voyage AI | AI | AI embeddings; not used since October 31st, 2026 when production moved to Cloudflare Workers AI — receives data only if an operator selects it again | United States (vendor-hosted API) | Document text chunks, search queries (only if selected again) |
| Tavily | AI | Web search tool of the AI assistant — active only when web search is configured | United States (vendor-hosted API) | The search query the model writes, which can carry context from the conversation |
| Hugging Face | AI | Stores per-organization adapter weights — only when adapter training runs |
United States
|
Adapter weights derived from an organization's corrections |
| Anthropic | AI | Claude model inference, break-glass only — unreachable unless an operator switches on the emergency setting or selects it as the model provider | United States (vendor-hosted API) | Prompts and retrieved snippets, model outputs (only when enabled) |
| OpenAI | AI | GPT model inference, break-glass only after Anthropic; optional document classifier (off by default) | United States (vendor-hosted API) | Prompts and retrieved snippets, model outputs; document text sent for classification (only when enabled) |
| Groq | AI | Not used by default — receives data only if an operator re-enables it | United States (vendor-hosted API) | Prompts (only when enabled) |
| Inngest | Automation | Orchestrates document-indexing and asynchronous jobs | United States (vendor-hosted API) | Job event metadata (organization, document, and job identifiers and parameters) |
| Resend | Account verification and notification email delivery | United States (vendor-hosted API) | Email addresses, notification content | |
| Stripe | Payment Processing | Subscription billing and payment processing |
United States
global
|
Billing / account metadata; card data is tokenized by Stripe and never stored by DevAI |
| Sentry | Error Tracking | Application error and performance monitoring |
United States
|
Stack traces and request context, PII-scrubbed before transmission |
| PostHog | Analytics | Product usage analytics for the API and the browser |
 European Union
|
Usage events keyed by user ID |
| Cloud Infrastructure | "Sign in with Google" at user's choice; optional inference on inspection images (Cloud Vision) and analytics warehouse (BigQuery), each off unless configured | Google (global) BigQuery location set per deployment | The sign-in request (Google returns name and email address); inspection images, per-organization fact tables and machine telemetry (only when enabled) | |
| Microsoft | Cloud Infrastructure | "Sign in with Microsoft" (Entra ID) at user's choice; in-browser preview of Word, Excel, and PowerPoint files | Microsoft (global) | The sign-in request (Microsoft returns name and email address); a previewed Office file fetched through a short-lived signed link |
| RunPod | Cloud Infrastructure | GPU serving of DevAI's own model — whenever credentials are configured, outage fallback for AI, first choice for in-domain skills only when own-model routing is switched on (off by default) |
United States
EU (per endpoint)
|
Prompts and retrieved snippets, model outputs |
No subprocessors match your filters.
November 9, 2026
+20 added
- + Fly.io (Cloud Infrastructure)
- + Neon (Database)
- + Cloudflare (Cloud Infrastructure)
- + Upstash (Database)
- + GitHub (Developer Tools)
- + Together AI (AI)
- + Voyage AI (AI)
- + Tavily (AI)
- + Hugging Face (AI)
- + Anthropic (AI)
- + OpenAI (AI)
- + Groq (AI)
- + Inngest (Automation)
- + Resend (Email)
- + Stripe (Payment Processing)
- + Sentry (Error Tracking)
- + PostHog (Analytics)
- + Google (Cloud Infrastructure)
- + Microsoft (Cloud Infrastructure)
- + RunPod (Cloud Infrastructure)