Legal
Subprocessors
Pipemetry uses a small set of third-party subprocessors to operate the Service. Each is engaged under contractual confidentiality and data-protection terms and processes data only as needed to provide the function below. We update this page when we add, remove, or change a subprocessor. The authoritative subprocessor inventory for security and compliance purposes is maintained as part of our SOC 2 program.
| Subprocessor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription billing (system of record for billing). Processes billing contact and payment details; card data is handled by Stripe, not stored by Pipemetry. | United States / global |
| Resend | Transactional and product-lifecycle email — account, security, invite, billing, and notification messages. Receives recipient email address and message content for the emails we send. Product-lifecycle messages include an unsubscribe link; transactional messages (billing, security, and service notices) are unaffected by that choice. | United States |
| Cloudflare | CDN, DNS, and edge delivery for this marketing site, bot mitigation (when enabled), and secure tunnel ingress for the application. | Global edge network |
| PostHog | Privacy-preserving product and marketing-site analytics (not currently active — listed for when analytics are enabled). Configured without autocapture or session recording; IP anonymized; no form contents collected. | United States |
| Anthropic | Powers the optional in-product AI features: the AI assistant and generated forecast narrative summaries. Engaged only when you use the optional AI features — the in-product assistant and generated forecast narrative summaries; receives the specific forecast context needed to answer your request, not bulk CRM exports. Anthropic does not train on data submitted via its API. | United States |
Customer-directed destinations
Some features let you send your own data to destinations you choose and control — outbound webhooks to a URL you register, our read API (via a workspace API key), signed spreadsheet export links for tools such as Google Sheets or Excel, and public board-snapshot share links you publish. These are your own tools and recipients, not subprocessors we engage on your behalf, so they sit outside the list above. When you configure them you direct the transfer and are responsible for the destination and its recipients; see our Privacy Policy and Terms of Service for how that responsibility is allocated.
Core infrastructure
The tenant-isolated databases (Postgres and ClickHouse), object storage, and the identity provider that run the application are operated and managed by Pipemetry ourselves, on infrastructure in the United States under our own security controls — including row-level tenant isolation, least-privilege access, encryption, and audit logging — rather than by a third party that independently processes your data. These are covered by our security program and are available to Enterprise customers under NDA.
Changes & notifications
To be notified in advance of material changes to this list, email [email protected] and ask to be added to our subprocessor change notifications.