Legal · subprocessors

Subprocessors

These are the third parties that may process your data on our behalf. We commit to notifying account owners ≥30 days before adding a new entry to this list — your subscription to that notice is implicit in your account.

Cloudflare, Inc.

Purpose: DNS, TLS termination + CDN (24observe.com, login.24observe.com, api.24observe.com), DDoS protection, cookieless Web Analytics, and transactional email delivery (Cloudflare Email Service, from no-reply@24observe.com)

Region: Global edge (300+ POPs)

DPA: view

Neon, Inc.

Purpose: Managed PostgreSQL — the primary relational store: accounts, organizations, configurations, incidents, billing records, and metadata

Region: United States (AWS)

DPA: view

Dodo Payments

Purpose: Payment processing + subscription billing for paid plans: hosted checkout, the customer billing portal, card processing, invoices, and the customer/subscription records needed to bill you (we never store card numbers ourselves)

Region: Global

DPA: view

OpenRouter (model gateway)

Purpose: AI features — the AI SOC analyst and AI-assisted ingest mapping. Redacted incident/log excerpts are sent at request time to generate assistive output; routes to upstream model providers (e.g. OpenAI). Customers may bring their own provider where supported

Region: United States

DPA: view

Not on this list (for clarity)

ClickHouse, Redis — your logs/metrics/traces and queues run on our own infrastructure, not a managed cloud service
The API, scheduler, worker, graph sidecar, Caddy/nginx — our own software on our own servers
We do not use advertising networks, data brokers, or cross-site trackers anywhere

Contact

Questions: privacy@24observe.com