Sub-processors

Last updated 7 October 2026. Source: sheptra.core/docs/decision_records/hosting.md §1 · sheptra.infra/modules/edge

Every third party that handles customer data on Sheptra’s behalf, what each one does for the service, what it sees, and where it runs. This list and the privacy note are checked against each other and against the code on every build.

The list#

• DigitalOcean

  Does: Compute (App Platform), Managed PostgreSQL, container registry.

  Handles: All customer runtime data: definitions, instances, history, tasks, incidents; modeler content; organization and member records; backups.

  Where: New York (nyc3), United States · privacy policy

• Cloudflare

  Does: DNS, TLS and DDoS protection on every host; hosting for the Drive and Modeler apps (Pages); request routing (Workers); the execution-history archive (R2); the notify list (D1); the sign-up anti-abuse check (Turnstile); forwarding of mail sent to our addresses (Email Routing).

  Handles: Every request in transit; archived execution data; notify-list email addresses; mail sent to our addresses.

  Where: Global network; archive in Eastern North America · privacy policy

• Vercel

  Does: Hosting and aggregate analytics for this marketing site.

  Handles: Requests to this site only; no customer runtime data.

  Where: Global network, United States company · privacy policy

• WorkOS

  Does: Identity: sign-in, single sign-on, directory sync (SCIM), roles, worker credentials.

  Handles: Names, email addresses, organization membership, roles, credential identifiers.

  Where: United States · privacy policy

• Grafana Labs

  Does: Telemetry: logs, traces, metrics and alerting (Grafana Cloud).

  Handles: Identifiers, timings and error messages; not process variables or payloads.

  Where: United States · privacy policy

Transactional email#

None yet. Sheptra sends no email to customers today — not even from the notify list, which has not been written to. A provider will be added to this list before the first message is sent. Mail to our addresses is forwarded by Cloudflare Email Routing, listed above; it stores nothing and sends nothing.

In the estate, holding no customer data#

Two providers are part of how Sheptra is built and deployed but never see customer data: GitHub (source code, continuous integration, and the deployment pipeline’s secrets) and HashiCorp (HCP Terraform, which holds the infrastructure’s state). They are listed here for completeness, not as sub-processors.

Changes to this list#

A party is added here before it handles anything. Customers with an executed data processing agreement are told of a new sub-processor in advance, with the notice period that agreement states, and may object as it describes. The date at the top of this page changes whenever the list does. To be told directly, write to contact@sheptracloud.com.