Subprocessors
Subprocessor List
The third parties that may process customer data to provide, secure, and support the Services.
Subprocessor List
This page identifies third-party subprocessors that Frostbridge may use to provide, secure, support, host, monitor, analyze, or improve the Services.
Subprocessors
| Subprocessor | Entity / Legal name | Purpose | Location / transfer notes | Data categories | More info |
|---|---|---|---|---|---|
| Google Cloud Platform | Google LLC | Cloud hosting, database, secrets, CI/CD, artifact storage, logging/monitoring, static hosting | United States / global infrastructure | Account identifiers, org/team metadata, session/event telemetry, policy configs, audit logs, encrypted application data | cloud.google.com |
| Clerk | Clerk, Inc. | Authentication, session management, organization membership, SSO (SAML/OIDC) | United States / global infrastructure | Name, email, user ID, auth metadata, org membership, SSO attributes | clerk.com |
| Stripe | Stripe, Inc. | Subscription billing, payments, invoicing, customer portal | United States | Billing contact, email, customer/subscription IDs, payment metadata (card data handled by Stripe; Frostbridge does not store full PAN) | stripe.com |
| Anthropic | Anthropic, PBC | Optional AI features (session digests, classification, MCP deep-analysis) | United States | Prompt/context derived from customer session/event/MCP scan data submitted to the feature | anthropic.com |
| Resend | Resend, Inc. | Transactional email (invites, onboarding/setup links) | United States | Recipient email, name (if provided), org name, invite/setup links | resend.com |
| GitHub | GitHub, Inc. (Microsoft) | MCP / package supply-chain scanning when a GitHub repo URL is submitted | United States | Repo URL / metadata requested by customer; publicly available repo contents fetched for analysis | github.com |
Updates
Frostbridge may update this Subprocessor List from time to time. Customers that require notice of new subprocessors should email privacy@frostbridge.ai with the subject "Subprocessor Updates" to subscribe, or monitor this page.
Objections
Where required by the Customer Agreement or Data Processing Addendum, Customer may object to a new subprocessor by sending written notice to privacy@frostbridge.ai within the stated objection period.