Last updated October 28, 2026

Subprocessors

These companies process data for Brigade, under contracts that protect it as our data processing agreement requires. Transfers to the United States rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Cloudflare, Inc.: Runs Brigade (Workers, Durable Objects, D1), stores files (R2), DNS, bot checks (Turnstile). Global network; company in the United States.
• Neon (Databricks, Inc.): Database. EU (Frankfurt, on AWS).
• Boat: Cloud computers of workspaces with Brigade Cloud. EU (Germany, Finland or France).
• Resend, Inc.: Sending and receiving email. United States.
• Stripe Payments Europe, Ltd.: Payments, invoices. Ireland, and the United States.
• PostHog, Inc.: Product analytics: visits to the website and feature usage, without content; error reports. EU (Frankfurt).
• Google LLC: Sign in with Google; Gmail notifications for connected Google Apps. United States.
• GitHub, Inc.: Repository access, when connected. United States.
• Apple, Google and Mozilla push services: Delivering the notifications a member turned on. United States.

Not ours: your AI provider

Teammates run on Claude Code or Codex, signed in with each member's own Anthropic or OpenAI account. What they read and write goes to that provider under the member's own agreement with it, not through Brigade. The same goes for the Apps you connect (such as Notion, Linear or Stripe): they receive what your teammates send them under your account with them.

Changes

We update this page, and its date, before a new subprocessor gets your data. A customer who objects can tell us at support@brigade.lol within 30 days, as the data processing agreement says.