Subprocessors

AgentTrail uses the following subprocessors to provide the service. Each processes customer data only for the purpose listed.

Subprocessor

Purpose

Amazon Web Services (AWS)

Cloud hosting in us-east-1: API, ingest, Postgres, ClickHouse, exports and backups. Stores all customer data.

Vercel

Hosts the web app. Receives page requests (IP address, URL, browser), not trace data.

Stripe

Payment processing: billing contact, payment card (held by Stripe), subscription and usage totals.

AWS SES

Transactional email: recipient address and message content (invites, verification, notifications).

Upstash

Managed Redis in us-east-1: sign-in refresh tokens, the token revocation list, rate limits, short-lived cached API-key checks, and a buffer of your recent live updates (up to 256 trace events per workspace) so the dashboard can resume after a reconnect.

Anthropic

AI classification, rule drafting and pattern review. For each classified session: the first prompt (up to 2,000 characters), up to 30 tool names and 30 file paths, and the session's status, step count and duration. For rule drafting: only the rule description you type. For pattern review: normalized command shapes, meaning the program name, its flags with any attached values (lowercased) and other bare words, with paths, numbers, quoted text and non-flag key=value arguments replaced by placeholders; not full transcripts.

Sentry

Error and performance monitoring: stack traces, error messages and URLs, with IP addresses removed.

WorkOS

Sign-in with Google or GitHub: your name, email address and account identifier.

Contact and demo forms. These send only what you type into them (your email, team size and message) to HubSpot, our CRM. Because the forms post from your browser, HubSpot also sees your IP address, browser details and the page you sent the form from. It is used only to reply to you; it never receives product or trace data.

Data processing agreement. Our Data Processing Addendum is part of our Terms of Service. We give at least 15 days' notice by email before adding or replacing a subprocessor.

Questions? Contact security@agenttrail.sh or see our Security & Trust overview.