For the companies that use PatchClock we process their data on their behalf (see the privacy notice and the terms). These are the companies that process that data for us. We tell customers before we add or replace one.
- OVH
- Hosting: the servers and the database that hold everything a company puts in PatchClock. France (EU)
- Mailgun
- Sending email: sign-in and team emails, and the security notices companies send to their own customers. EU region
- Paddle
- Payments and invoicing, as merchant of record. Receives billing details only. United Kingdom
- OpenAI
- AI: the text a company asks PatchClock to rewrite and, only with the company's consent, the files read from its repository to draft its technical documentation. United States, under the EU Standard Contractual Clauses Does not use API data to train its models and deletes it within 30 days.