Opaline Subprocessors
Opaline uses the providers below to deliver the hosted Service. Capitalised terms have the meanings given in the Data Processing Agreement.
Authorized subprocessors
Depending on the features a Customer uses, the following providers may process Customer Personal Data on Opaline's behalf:
| Provider | Processing function | Processing location |
|---|---|---|
| Vercel Inc. | Application hosting, serverless compute, networking and content delivery | Frankfurt, Germany for primary serverless compute; global edge network |
| Neon, Inc. | Managed PostgreSQL infrastructure for accounts, organizations, authentication and related application records | Configured project region; support and operations may occur in the United States |
| Obsession DB | Storage, parsing and analytics processing of coding-agent session data and workspace analytics | Frankfurt, Germany for Opaline's configured deployment |
| Cloudflare, Inc. | Object storage and transfer of session uploads, when direct upload is enabled | European Union for configured storage; global network |
| OpenAI OpCo, LLC | Optional AI-assisted analysis of Customer-selected session content | United States and other configured processing regions |
| Anthropic, PBC | Optional AI-assisted analysis of Customer-selected session content | United States for storage; processing may occur in the United States and other regions |
| Plus Five Five, Inc. (Resend) | Authentication codes, workspace invitations and operational email | United States |
| Stripe, LLC | Subscription, invoice and payment processing, including fraud prevention | United States and other locations where Stripe and its service providers operate |
Other service providers
The following providers support activities for which Opaline generally acts as an independent controller. They are not authorized to receive raw coding-agent session content unless the Customer separately submits it through the relevant service:
- PostHog Inc. for product analytics;
- Google LLC and GitHub, Inc. for optional identity-provider authentication; and
- Slack Technologies, LLC, when enabled, for limited internal operational notifications.
Changes to this list
Opaline will notify affected Customers before adding or replacing a subprocessor as described in Section 4 of the Data Processing Agreement. An urgent replacement needed for service availability, legal compliance or protection of the Service may be notified without undue delay afterward.
Questions or objections can be sent to evren@opaline.so.