SetForth Subprocessors
Last updated: July 1, 2026
To provide the SetForth platform and services (the "Service"), SetForth LLC engages certain third parties to process data on our behalf ("Subprocessors"). This page lists our current Subprocessors. It is referenced by our Data Processing Addendum and Privacy Policy.
Each Subprocessor is engaged under a written agreement that requires it to protect data consistent with our obligations and, where applicable, to support lawful international data transfers (for example, through the EU Standard Contractual Clauses).
Current Subprocessors
| Subprocessor (legal entity) | Service / purpose | Data processed | Primary location |
|---|---|---|---|
| Anthropic, PBC | AI model inference (Claude models) — running AI Agents on Customer Content to perform requested work | Customer Content transmitted for inference (including source code and prompts) and the resulting output | United States |
| Amazon Web Services, Inc. (Amazon Web Services EMEA SARL for EEA/UK customers) | Cloud hosting, storage, databases, and related infrastructure; and AI content-safety guardrails via Amazon Bedrock Guardrails — screening AI Agent inputs and outputs against safety policies | All hosted data, including account data and Customer Content; and Customer Content screened by the guardrail (prompt and completion text) | United States (selected AWS region) |
| Encoretivity AB (Encore Cloud) | Backend deployment, infrastructure orchestration, secrets management, and application observability (request tracing, logs, and metrics) | Operational, configuration, and diagnostic data, which may include personal data contained in request traces and logs | Sweden (European Union) |
| Vercel Inc. | Frontend application hosting and global content delivery for the web dashboard and marketing website, and privacy-friendly, cookieless web analytics | Application requests routed through the edge network (which may include account identifiers and other personal data in transit) and aggregated, anonymized usage and performance metrics, such as page views; the web analytics do not use cookies or build cross-site advertising profiles | United States |
| WorkOS, Inc. | Authentication, identity, organization directory, and authorization | Account and identity data (name, email, organization, identity-provider identifiers) | United States |
| Stripe, LLC (Stripe Payments Europe, Limited for EEA/UK customers) | Payment processing and subscription billing | Billing contact and transaction data (payment card data is handled by Stripe; SetForth does not store full card numbers) | United States (Ireland for EEA/UK) |
| GitHub, Inc. (a Microsoft company) | Source-code hosting integration and GitHub App actions the Customer authorizes | Repository access, repository metadata, and related identifiers, within the scope the Customer grants | United States |
| FoundryLabs, Inc. (E2B) | Isolated code-execution sandboxes for running Agents | Customer Content and code processed during sandboxed execution | United States |
| Functional Software, Inc. (d/b/a Sentry) | Error monitoring, diagnostics, and performance monitoring | Diagnostic and log data, which may include limited identifiers | United States |
| Amplitude, Inc. | Product usage analytics | Product-usage events and user/device identifiers | United States or European Union (per configured data region) |
| Plus Five Five, Inc. (d/b/a Resend) | Transactional and authentication email delivery | Recipient email address and name | United States |
| Crisp IM SAS | Customer-support live chat on our website | Visitor contact and chat data (name, email, chat messages, and related identifiers) submitted through the chat widget | France (European Union) |
Notes
- SetForth operates additional infrastructure (such as our usage-metering gateway) within our own AWS environment; those are operated by SetForth and are not separate Subprocessors.
- AI model inference is performed by Anthropic, PBC (the Claude models), under our agreement with Anthropic, which provides that Customer Content sent for inference is not used to train models and is subject to zero or limited retention (abuse-monitoring only). Separately, AI content-safety guardrails run within Amazon Web Services through Amazon Bedrock Guardrails; content screened by the guardrail is processed by AWS under terms that do not permit AWS to use it to train any models and do not share it with the model provider. See the Privacy Policy.
Changes and notifications
We may update this list as our Service evolves. As described in our Data Processing Addendum, we will provide notice before a new Subprocessor begins processing Customer Personal Data and offer a way to subscribe to updates. To be notified of changes, subscribe at setforth.app/legal/subprocessors or contact privacy@setforth.app. Customers may object to a new Subprocessor as provided in the Data Processing Addendum.
Contact
privacy@setforth.app · SetForth LLC