Skip to main content
Borg Security uses a limited set of third-party subprocessors to deliver the Odin platform. Each subprocessor is listed below with the data it processes and where it operates. You can view this information at any time at odin.borghq.io/legal/subprocessors.

​
Current subprocessors

EntitySystemLocationPurpose
Twilio Ireland LimitedSendGridUSAEmail delivery for OTP codes, invitations, and notifications
Intercom R&D Unlimited CompanyIntercomUSAIn-app customer support chat and messaging
Functional Software, Inc.SentryEUError monitoring and debugging
Google Cloud EMEA LimitedGoogle CloudEUCore backend infrastructure and processing pipeline
Cloudflare, Inc.CloudflareEU/USACDN, DNS, WAF, and DDoS protection
Vercel Inc.VercelEU/USAWeb application hosting and deployment
Anthropic PBCAnthropicUSAAI model provider for Mjolnir pentest analysis (transient processing, no storage)
MongoDB, Inc.MongoDB AtlasEUPrimary application database
ClickHouse, Inc.ClickHouse CloudEUEvent streaming and observability analytics
GitHub, Inc.GitHubUSARepository integration and issue syncing
This list was last updated on 1 April 2025. For questions about data processing, contact [email protected].
When your organisation first signs in to Odin, an Owner must accept the following agreements before using the platform:
  • Master Services Agreement (MSA) — the core service terms
  • Data Processing Agreement (DPA) — how Borg Security processes personal data
  • AI Services Addendum — additional terms for AI-powered features like Mjolnir
These documents are presented during the terms of service acceptance flow on first login.