Skip to content

Subprocessors

Last updated November 5, 2026

The companies that process customer data for Stableship, what each does, what it sees and where. We email workspace owners and update this page at least 30 days before adding or replacing one.

Supabase, Inc.

  • What it does: Database, sign-in, file storage and encrypted secret storage for Stableship; also hosts the temporary test copies of your database, each deleted when its run ends.
  • What it sees: Everything Stableship stores, and the test copies.
  • Where: United States (AWS us-east-1)

Railway Corporation

  • What it does: Runs the service that coordinates audits and checks and serves the API at api.stableship.ai.
  • What it sees: Everything Stableship processes, in transit.
  • Where: United States (Oregon)

Fly.io, Inc.

  • What it does: Short-lived machines that build and test a private copy of your app, destroyed when the job ends.
  • What it sees: Your source code at one commit, the test copy, and what the browser sees while testing it.
  • Where: United States (Ashburn, Virginia)

Vercel Inc.

  • What it does: Hosts stableship.ai and app.stableship.ai.
  • What it sees: Pages you request and the requests the app makes.
  • Where: Global edge network (static files only)

Anthropic, PBC

  • What it does: The AI models that review code and drive the testing agents.
  • What it sees: Code and diffs, database structure, your rules and notes, and pages and logs from the test copy.
  • Where: United States

Stripe, Inc.

  • What it does: Payments, invoices and the billing portal.
  • What it sees: Billing contact, plan and payment details. Card numbers go to Stripe and never reach Stableship.
  • Where: United States

Resend (Plus Five Five, Inc.)

  • What it does: Sends Stableship’s email: sign-in links, alerts and notices.
  • What it sees: Recipient address and the email’s content.
  • Where: United States

GitHub, Inc.

  • What it does: Repository access through the Stableship GitHub App you install, and sign-in with GitHub.
  • What it sees: Your GitHub identity and the repositories you select.
  • Where: United States

Slack Technologies, LLC

  • What it does: Alerts and approvals in Slack, only if you connect it.
  • What it sees: Alert content and the Slack names and emails of people who approve.
  • Where: United States

VersionSeven

  • What it does: Runs Stableship’s support desk. It uses Resend for email, and Anthropic and OpenAI to draft replies that a person reviews before anything is sent.
  • What it sees: Support messages, your name, email and workspace, and the account facts needed to answer.
  • Where: United States

OpenAI, L.L.C.

  • What it does: Drafts support replies in the support desk, reviewed by a person before sending.
  • What it sees: Support messages and the account facts needed to answer.
  • Where: United States

PostHog, Inc.

  • What it does: Product analytics: how the site and the app are used, so we can see where setup is hard and what to improve. On stableship.ai it sets no cookies.
  • What it sees: Your account email and GitHub login, workspace and app ids, the pages you open and the actions you take in Stableship, and the counts, durations and costs of runs. Never your code, findings, database contents or your users’ data.
  • Where: United States

Services you connect

Services you connect with your own credentials (your hosting at Vercel, Netlify or Cloudflare, your Supabase project, your Clerk development instance, your Stripe test account, and your own AI provider keys) act for you under your agreements with them. They are not Stableship subprocessors.

Changes

  • November 5, 2026: Added PostHog, for product analytics, starting the same day: every workspace owner agreed to waive the 30 days’ notice.
  • November 2, 2026: First published list.