Subprocessors
Subprocessors are third parties that process customer personal data on our behalf in the hosted service. Self-hosted deployments involve none of them.
Last updated
Current subprocessors
GhostAudit uses the following subprocessors to provide the hosted service.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| DigitalOcean | Application hosting, database and backups | All customer data in the hosted service | United States (New York) |
| Cloudflare | DNS, TLS termination and network protection in front of the service | Request traffic in transit, including IP addresses | Global network |
| Stripe | Subscription billing and payments, once paid checkout is enabled | Billing contact, plan, seat count. No sensor telemetry | United States |
No transactional email provider and no language-model provider is used on the hosted service at present. Either will be added to this list, with notice as described above, before it is used.
What is not shared with subprocessors
Sensor telemetry is sent by sensors directly to the GhostAudit server and is stored by our hosting provider only. It is not sent to analytics, advertising or data-enrichment services.
Integrations you connect
Services that you choose to connect to your workspace, such as Google Workspace, Microsoft 365, GitHub, Okta, Jira, Slack or Microsoft Teams, your identity provider for single sign-on, and any log export destination such as Splunk or Datadog, are not our subprocessors. You have your own relationship with them, and GhostAudit exchanges data with them on your instructions using credentials you provide.
Website
The public website serves its fonts from our own domain. Visitors' browsers do not contact a font service.
Self-hosted deployments
If you run GhostAudit on your own infrastructure, none of the subprocessors above process your data. Your deployment contacts only the services you configure.
Changes
We will update this page at least 30 days before a new subprocessor begins processing customer personal data, as set out in the data processing addendum. To be notified of changes by email, write to [email protected].
Questions about this document: [email protected]