Subprocessors

These providers may process personal data when GaugeWright supplies the corresponding hosted function. A customer-selected identity or model provider acts under the customer's configuration and may also be a separate controller or processor under its own agreement.

Provider	Purpose	Data involved	Processing location
Microsoft Azure	Hosted compute, network, storage, managed secrets, and attestation services	Hosted customer content, account/audit metadata, encrypted secrets	United States; configured Azure region
Cloudflare	DNS, edge delivery, static hosting, and managed runtime where enabled	IP/device request data; deployment content and service metadata where enabled	Global network
GitHub	Source control, build automation, security scanning, release artifacts, and operational alert issues	Source/build metadata and sanitized operational evidence; no intended customer workspace payload	United States/global service
Google	Company email, scheduling, support, and optional identity federation	Business contact/support data; identity claims when selected	United States/global service
Stripe	Payment and subscription processing when billing is enabled	Billing contact, transaction, and subscription identifiers; payment credentials are handled by Stripe	United States/global service
Infisical	Managed machine-secret storage and delivery where configured	Service credentials and configuration secrets; no intended customer workspace payload	United States
Customer-selected model provider	AI inference requested by an authorized user	Prompts and in-scope context sent for that request	Provider/customer configuration
Customer-selected identity provider	Authentication and group/role claims	Identity, authentication, and authorization claims	Provider/customer configuration

Questions or objections

Email Jack@GaugeWright.com. We will assess documented data-protection concerns and provide available information about the relevant provider and safeguards.