Subprocessors
Last updated 11 October 2026
These companies process personal data for us to run Bug Smash, under contracts that hold them to data protection terms at least as protective as our DPA. Coding agents and integrations that your workspace chooses to connect aren't on this list: they work for you, not us.
| Company | What it does | Data | Where |
|---|---|---|---|
| Railway Corp. | Hosts the web app, API and background jobs | All Service data while it is processed | United States |
| Neon, Inc. (a Databricks company) | Database, on Amazon Web Services | Accounts, workspaces and their content (except files) | United States (AWS us-east-1) |
| Cloudflare, Inc. | File storage (R2) and DNS | Screenshots, traces, videos and other files | United States |
| Stripe, Inc. | Payments, invoices and tax | Billing contact, payment details, subscription | United States |
| Resend, Inc. | Sending email | Email address, name, email content | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Error details and technical data, configured without user details | United States |
| Google LLC | "Sign in with Google", when you choose it | Name, email, profile picture | United States |
Changes
Before we add or replace a subprocessor, we update this page and email workspace owners at least 30 days ahead (or sooner in an emergency, telling you why). If you object on reasonable data-protection grounds, tell us at support@bugsmash.dev within that time; if we can't address it, you may cancel and we'll refund prepaid fees for the time after the change.