Subprocessors
Third-party service providers that process data on behalf of Redshift.
Overview
In accordance with GDPR transparency requirements, this page lists all third-party service providers (subprocessors) that may process customer data as part of the Redshift service. All subprocessors have been carefully vetted for security and compliance standards.
Change Notification
We will notify customers at least 30 days in advance before adding new subprocessors or making material changes to existing subprocessor arrangements.
Changes are posted on this page and noted in the release notes of the version that introduces them.
Current Subprocessors
Purpose: Anonymous product analytics
Data Processed: Which app sections were opened and coarse counts of actions. No identity, no repository names, no file paths, no code. Off when you switch analytics off in Settings.
Location: Germany (EU)
Security: Processes no personal data by design
Purpose: Website hosting and visitor analytics
Data Processed: Standard web server logs and cookie-free page-view analytics for visitors to redshifthub.com. The application itself does not talk to this.
Location: United States
Security: SOC 2 Type II
Purpose: DNS and email forwarding
Data Processed: DNS queries for the domain, and forwarding of email sent to hello@redshifthub.com.
Location: United States
Security: SOC 2 Type II, ISO 27001
Purpose: Optional sign-in
Data Processed: An account identifier, created only if you connect a GitHub account in the app. No repository content.
Location: United States
Security: SOC 2 Type II, ISO 27001
Data Transfer Mechanisms
All subprocessors listed above are located in the United States. For international data transfers from the EU/EEA, we rely on:
Services that are yours, not ours
Redshift connects you to several services, but those are your relationships under your own accounts and terms, not providers acting on our behalf. We list them here because a reviewer will find them and should know which side of the line they sit on.
Security Vetting Process
Before adding any new subprocessor, we conduct a security assessment that includes:
Contact
For questions about our subprocessors or to exercise your objection rights under our Data Processing Agreement, please contact us at hello@redshifthub.com
Get in Touch