DevAI Suite Subprocessors
DevAI Suite is an AI platform providing API, web application, and background worker services with document processing, AI inference, and analytics capabilities.
- Subprocessors
- 20
- Locations
- 14
- Categories
- 9
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Fly.io | Cloud Infrastructure | Runs the API, web application, and background workers | EU (Frankfurt) | Customer Data in transit, application logs, account data |
| Neon | Database | Managed PostgreSQL + pgvector; tenant data at rest with Row-Level Security isolation and RAG vector storage | EU (Frankfurt aws-eu-central-1) | All Customer Data at rest |
| Cloudflare | Cloud Infrastructure | CDN / Object Storage / Bot Protection / AI Embeddings; R2 object storage, DNS and edge delivery, Turnstile CAPTCHA, marketing site, operator console, Workers AI vector embeddings | R2: EU jurisdiction. Edge: global. Workers AI: Cloudflare network no region choice | Uploaded documents & templates, full database dumps, request metadata and IP address, challenge tokens, operator-console records; document text chunks and search queries |
| Upstash | Database | Redis cache, rate-limit counters, and real-time message fan-out between API machines |
 United States
|
Rate-limit keys (IP address, user ID), short-lived cached values and messages |
| GitHub | Developer Tools | Hosts source code and CI; nightly database dump and monthly restore drill run on GitHub-hosted runners | GitHub-hosted runners (region not selectable) | A full copy of the production database, held on the runner for the length of those jobs |
| Together AI | AI | Default LLM inference, image understanding, and speech-to-text; training of a per-organization adapter when a fine-tune runs | United States (vendor-hosted API) | Prompts and retrieved snippets, tool results, images, recorded audio, model outputs; organization correction pairs during fine-tune with consent, deleted when job ends |
| Voyage AI | AI | AI embeddings; not used since October 31st, 2026 when production moved to Cloudflare Workers AI — receives data only if an operator selects it again | United States (vendor-hosted API) | Document text chunks, search queries (only if selected again) |
| Tavily | AI | Web search tool of the AI assistant — active only when web search is configured | United States (vendor-hosted API) | The search query the model writes, which can carry context from the conversation |
| Hugging Face | AI | Stores per-organization adapter weights — only when adapter training runs |
United States
|
Adapter weights derived from an organization's corrections |
| Anthropic | AI | Claude model inference, break-glass only — unreachable unless an operator switches on the emergency setting or selects it as the model provider | United States (vendor-hosted API) | Prompts and retrieved snippets, model outputs (only when enabled) |
| OpenAI | AI | GPT model inference, break-glass only after Anthropic; optional document classifier (off by default) | United States (vendor-hosted API) | Prompts and retrieved snippets, model outputs; document text sent for classification (only when enabled) |
| Groq | AI | Not used by default — receives data only if an operator re-enables it | United States (vendor-hosted API) | Prompts (only when enabled) |
| Inngest | Automation | Orchestrates document-indexing and asynchronous jobs | United States (vendor-hosted API) | Job event metadata (organization, document, and job identifiers and parameters) |
| Resend | Account verification and notification email delivery | United States (vendor-hosted API) | Email addresses, notification content | |
| Stripe | Payment Processing | Subscription billing and payment processing |
United States
global
|
Billing / account metadata; card data is tokenized by Stripe and never stored by DevAI |
| Sentry | Error Tracking | Application error and performance monitoring |
United States
|
Stack traces and request context, PII-scrubbed before transmission |
| PostHog | Analytics | Product usage analytics for the API and the browser |
 European Union
|
Usage events keyed by user ID |
| Cloud Infrastructure | "Sign in with Google" at user's choice; optional inference on inspection images (Cloud Vision) and analytics warehouse (BigQuery), each off unless configured | Google (global) BigQuery location set per deployment | The sign-in request (Google returns name and email address); inspection images, per-organization fact tables and machine telemetry (only when enabled) | |
| Microsoft | Cloud Infrastructure | "Sign in with Microsoft" (Entra ID) at user's choice; in-browser preview of Word, Excel, and PowerPoint files | Microsoft (global) | The sign-in request (Microsoft returns name and email address); a previewed Office file fetched through a short-lived signed link |
| RunPod | Cloud Infrastructure | GPU serving of DevAI's own model — whenever credentials are configured, outage fallback for AI, first choice for in-domain skills only when own-model routing is switched on (off by default) |
United States
EU (per endpoint)
|
Prompts and retrieved snippets, model outputs |
No subprocessors match your filters.
Your data may flow beyond direct subprocessors. Click to expand and see the chain.
Loading data flow...
No changes recorded yet. Changes will appear here after the next scan detects updates.