Sub-processors
Effective 2026-10-15. The providers we use to run the intentic platform, what each one does, and where it processes data. We announce changes here before they take effect.
The list
| Provider | What it does | Where | Transfer safeguard |
|---|---|---|---|
| Fly.io, Inc. (US) | Runs the virtual machine and disk of a sandbox we host, and our ingress: the relay that carries browser traffic to every sandbox opened through its intentic address, hosted or self-run, and decrypts it in memory to route it | Hosted sandboxes: European Union (Stockholm) for users in the EEA, UK and Switzerland, United States (Ashburn) for everyone else. Ingress: United States (Ashburn) | Standard Contractual Clauses |
| Cloudflare, Inc. (US) | Website delivery and DNS, including the names sandboxes are reached at. Sandbox traffic goes through our own ingress instead, except for a sandbox still connected through an older Cloudflare tunnel | Global edge network | Data Privacy Framework and Standard Contractual Clauses |
| Google Ireland Ltd / Google LLC | Sign-in with Google, the fonts the website loads, and the Gemini models that serve the free trial | European Union and United States | Data Privacy Framework |
| Resend (Plus Five Five, Inc., US) | Sends the platform's email: sign-in codes, sandbox invitations and notices about a hosted sandbox. It receives the recipient's address and the message | United States | Standard Contractual Clauses |
| PostHog, Inc. (US) | Visit counts for the website, with no identifier stored in the browser, and product analytics for the workspace app and the desktop app: usage events with page addresses reduced to routes and your workspace's text masked, and session replay of the interface with the editor, terminals and images blanked and everything you type masked out | United States (PostHog Cloud US) | Standard Contractual Clauses |
| Stripe Payments Europe Ltd (IE) | Hosted plan payments and invoicing | European Union and United States | Data Privacy Framework and Standard Contractual Clauses |
Not on this list, deliberately
Your own model provider, Anthropic, or whoever you configure with your own key, is not our sub-processor. Your sandbox talks to them directly under your own agreement, and that traffic never passes through us. The one exception is the free trial, where the model calls are ours: that is why Google appears above.
We use no advertising, error-tracking or customer-messaging providers, so none appear here. Resend, above, sends only the mail the service needs, never marketing. Our one analytics provider, PostHog, is in the table above.
Changes
If we add or replace a sub-processor, we update this page and announce it in the app before the change takes effect, so customers relying on our Data Processing Agreement can object. Objecting means you can stop using the hosted sandbox and delete it.