Subprocessors
Borg Security AS uses the following subprocessors to deliver the Odin platform. This list is maintained in accordance with our Data Processing Agreement.
Twilio Ireland Limited
SendGrid
Sends authentication OTP emails, invitations, and notifications
Processes recipient email addresses, transient OTP codes, and email content such as authentication messages, invitations, and notification alerts
Intercom R&D Unlimited Company
Intercom
In-app chat, help centre, and messaging
Processes customer name, email address, chat messages, support history, and device/browser metadata
Functional Software, Inc.
Sentry
Error monitoring and debugging
Processes error logs, stack traces, request metadata, and limited user context (e.g. email or user ID) linked to errors
Google Cloud EMEA Limited
Google Cloud
Core backend infrastructure and processing pipeline
Processes source code (transiently), HTTP traffic during testing, task metadata, encrypted credentials, and stored files in infrastructure services
Cloudflare, Inc.
Cloudflare
CDN, DNS, WAF, and DDoS protection
Processes IP addresses, request metadata, cookies, URL paths, and security logs
Vercel Inc.
Vercel
Web application hosting and deployment
Processes HTTP requests, session tokens, IP addresses, and temporary application data during rendering and builds
Anthropic PBC
Anthropic
AI-powered analysis and testing (Mjolnir)
Processes source code snippets and HTTP request/response data transiently during execution; no persistent storage
MongoDB, Inc.
MongoDB Atlas
Primary application database
Processes user data, account data, findings, reports, configurations, authentication data, and audit logs
ClickHouse, Inc.
ClickHouse Cloud
Event streaming and observability
Processes pipeline events, run metadata, timing data, and usage metrics
GitHub, Inc.
GitHub
Repository integration and issue syncing
Processes repository data via API access and findings data when synced to GitHub Issues
| Entity | System | Location | Type of Service | Usage | Description of Processing |
|---|---|---|---|---|---|
| Twilio Ireland Limited | SendGrid | USA | Email service provider | Sends authentication OTP emails, invitations, and notifications | Processes recipient email addresses, transient OTP codes, and email content such as authentication messages, invitations, and notification alerts |
| Intercom R&D Unlimited Company | Intercom | USA | Customer support | In-app chat, help centre, and messaging | Processes customer name, email address, chat messages, support history, and device/browser metadata |
| Functional Software, Inc. | Sentry | EU | Logging and error tracking | Error monitoring and debugging | Processes error logs, stack traces, request metadata, and limited user context (e.g. email or user ID) linked to errors |
| Google Cloud EMEA Limited | Google Cloud | EU | Infrastructure hosting | Core backend infrastructure and processing pipeline | Processes source code (transiently), HTTP traffic during testing, task metadata, encrypted credentials, and stored files in infrastructure services |
| Cloudflare, Inc. | Cloudflare | EU/USA | Infrastructure and security | CDN, DNS, WAF, and DDoS protection | Processes IP addresses, request metadata, cookies, URL paths, and security logs |
| Vercel Inc. | Vercel | EU/USA | Infrastructure hosting | Web application hosting and deployment | Processes HTTP requests, session tokens, IP addresses, and temporary application data during rendering and builds |
| Anthropic PBC | Anthropic | USA | AI model provider | AI-powered analysis and testing (Mjolnir) | Processes source code snippets and HTTP request/response data transiently during execution; no persistent storage |
| MongoDB, Inc. | MongoDB Atlas | EU | Database | Primary application database | Processes user data, account data, findings, reports, configurations, authentication data, and audit logs |
| ClickHouse, Inc. | ClickHouse Cloud | EU | Database / analytics | Event streaming and observability | Processes pipeline events, run metadata, timing data, and usage metrics |
| GitHub, Inc. | GitHub | USA | Code hosting | Repository integration and issue syncing | Processes repository data via API access and findings data when synced to GitHub Issues |
Last updated: 1 April 2025