Skip to content

Draft: have a lawyer review before publishing. Fields in square brackets, such as [Company legal name], must be filled in.

Legal & trust

Subprocessors

The providers that process personal data on Wutbug's behalf to provide the Service, what they do and where.

Effective: [Effective date]

Contents
  1. Current subprocessors
  2. What is not a subprocessor
  3. Subscribe to changes

Wutbug uses the following providers (subprocessors) to provide the Service. All are subject to data protection obligations equivalent to those of the DPA. We will give at least 30 days' notice before adding or replacing one.

Last updated: [Effective date].

Current subprocessors

ProviderServiceDataLocation
Neon (Databricks, Inc.)Postgres database, account authentication, object storage (report files)All Service data: accounts, reports, replay, console, network, screenshots and recordingsAWS us-east-2 (Ohio, USA)
OpenRouter, Inc. and the model provider it routes to (Google by default, to be confirmed)Generate the summary and duplicate suggestions for a reportAlready-masked report context (description, steps, errors, failed requests, device)USA (to be confirmed)
Dashboard and API hosting: Vercel, Inc. (to be confirmed)Serve the Dashboard and process requestsData in transit and technical logs (IP, user agent)USA and global network (to be confirmed)
Transactional email provider: Resend or Postmark (to be confirmed)Send notices to the team, mentions, invitations and emails to the reporterEmail, name and content of the noticeUSA (to be confirmed)
Upstash, Inc. (if enabled)Rate-limit counters shared across serversIP and project key, expiring within minutes[Region to be confirmed]

What is not a subprocessor

  • Integrations that the customer connects: Slack, Linear, Jira, Notion and Asana. They receive data on the customer's instructions, under the customer's direct relationship with those services.
  • AI assistants connected through MCP (Claude Code, Cursor, VS Code or others). They query reports with the personal token of the customer's user; subsequent processing is governed by the customer's agreement with its AI provider.
  • Google and GitHub as sign-in methods. They are involved only if a team member chooses to sign in with them, and they do not receive End User data.

Subscribe to changes

To receive notices of changes to this list, write to [Contact email]. The owners of each team receive the notice by email automatically.