> ## Documentation Index
> Fetch the complete documentation index at: https://docs.borghq.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Subprocessors

> Third-party services that process data on behalf of Borg Security

Borg Security uses a limited set of third-party subprocessors to deliver the Odin platform. Each subprocessor is listed below with the data it processes and where it operates.

You can view this information at any time at [odin.borghq.io/legal/subprocessors](https://odin.borghq.io/legal/subprocessors).

## Current subprocessors

| Entity                          | System           | Location | Purpose                                                                           |
| ------------------------------- | ---------------- | -------- | --------------------------------------------------------------------------------- |
| Twilio Ireland Limited          | SendGrid         | USA      | Email delivery for OTP codes, invitations, and notifications                      |
| Intercom R\&D Unlimited Company | Intercom         | USA      | In-app customer support chat and messaging                                        |
| Functional Software, Inc.       | Sentry           | EU       | Error monitoring and debugging                                                    |
| Google Cloud EMEA Limited       | Google Cloud     | EU       | Core backend infrastructure and processing pipeline                               |
| Cloudflare, Inc.                | Cloudflare       | EU/USA   | CDN, DNS, WAF, and DDoS protection                                                |
| Vercel Inc.                     | Vercel           | EU/USA   | Web application hosting and deployment                                            |
| Anthropic PBC                   | Anthropic        | USA      | AI model provider for Mjolnir pentest analysis (transient processing, no storage) |
| MongoDB, Inc.                   | MongoDB Atlas    | EU       | Primary application database                                                      |
| ClickHouse, Inc.                | ClickHouse Cloud | EU       | Event streaming and observability analytics                                       |
| PostHog, Inc.                   | PostHog          | EU       | Product analytics and session replay (inputs masked)                              |
| GitHub, Inc.                    | GitHub           | USA      | Repository integration and issue syncing                                          |

<Info>
  This list is also maintained at [odin.borghq.io/legal/subprocessors](https://odin.borghq.io/legal/subprocessors) and is updated as subprocessors are added or removed. For questions about data processing, contact [mail@borghq.io](mailto:mail@borghq.io).
</Info>

## Related agreements

When your organisation first signs in to Odin, an Owner must accept three agreements before using the platform:

* **Master Services Agreement (MSA)**: the core service terms
* **Data Processing Agreement (DPA)**: how Borg Security processes personal data
* **AI Services Addendum**: additional terms for AI features like Mjolnir

These documents are shown during the [terms of service acceptance](/getting-started/terms-of-service) flow on first login.