Subprocessors
The dated list of the third parties that handle customer data on audytx's behalf — checked against the deployed configuration, not a compliance questionnaire. Governing terms: our Data Processing Addendum.
Current subprocessors
Each row is checked against how the service is deployed, not against a vendor questionnaire.
| Subprocessor | What it does for audytx | Location | Terms |
|---|---|---|---|
| Cloudflare, Inc. | Edge compute (Workers) serving every request, the D1 database for scan and account data, Queues carrying usage-counter and outbound-email jobs, Email Sending for transactional mail from audytx.com, and Workers Logs (operational logs, kept 7 days) | Global edge network; the D1 database is in the Asia-Pacific (APAC) region | Cloudflare DPA |
| GitHub, Inc. | Source of the scanned files (Contents API) and destination of the results: pull-request comments, check runs, and Code Scanning (SARIF) uploads | GitHub-managed infrastructure | GitHub DPA |
| Google Workspace (Google) | Staff mailboxes for audytx.com: contact-form messages, abuse reports, sign-up notices and support email are delivered here | Google-managed infrastructure | Google Cloud Data Processing Addendum |
These are the providers that handle customer data for audytx. No analytics vendor, email-marketing platform or error-tracking SaaS is used. What the trust page says about data sharing applies to all three.
Changes to this list
We publish a dated entry below at least 30 days before any new subprocessor begins processing. If you object, your remedy is to stop using the service before the change takes effect — removing the GitHub App stops audytx's access to your repositories (see the DPA, section 7).
- 2026-10-02 — Google Fonts removed: the website now serves its own font files, so a page no longer asks Google for fonts.
- 2026-10-01 — Google Workspace added to the list: it already hosted the staff mailboxes, and this entry records it. Google Fonts added: the website's pages currently load their fonts from Google. Cloudflare's data location is stated as APAC, and Workers Logs (7 days) is named.
- 2026-07-13 — Initial published list: Cloudflare, GitHub.