Legal
Sub-processors
The companies that process personal data to run Pupitre, what they do, where, and how you are told about a change.
Updated October 2, 2026
This is the list the privacy policy and the data processing agreement name. It only counts those that touch personal data; the date at the top of this page is that of its last change.
| Sub-processor | Purpose | Region |
|---|---|---|
| Cloudflare, Inc. | Hosting of the site and the console, platform database (accounts, organisations, servers, licences, journal), storage of binaries and attachments, inbound and outbound email, audience measurement without a cookie or an identifier (Web Analytics) | United States company, global network; the database and the files in eastern North America |
| Stripe, Inc. | Merchant of record for licences beyond the free servers, the day they are sold; nothing is sent to it today | United States and Ireland |
What is not on it
The data that lives on your machines and in your backups goes through none of them: it stays with the host of your machine and with the storage provider you chose, with whom you contract yourself. The model providers your coding agents call are yours, on your own subscriptions.
Nor are GitHub and Google on it: they receive something only if you choose to sign in through one of them, and then process it under their own policies. Stripe is listed and receives nothing today. Cloudflare is therefore the only company that processes your data to run Pupitre, in the United States, which you explicitly agree to when you create your account, as the privacy policy says.
Changes
Adding or replacing a sub-processor is announced by email to the owners of every organisation before it happens, then published here with its date. An organisation may object as the data processing agreement provides, by writing to legal@pupitre.studio.