Sub-processors
Last updated 5 July 2026
Swazona uses the third-party providers listed here (sub-processors) to deliver the service. Each one processes data only on our instructions and under a data-processing agreement. This list is versioned: when we add or replace a provider we update the date above and, where required, notify you before the change takes effect.
Core service providers
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Anthropicanthropic.com | Default AI model powering generation, audits, and agent sessions | Prompts and the business or code content needed for the feature you run | United States |
| OpenAIopenai.com | Text embeddings for search and memory | Text excerpts from your briefs, documents, and code | United States |
| Coherecohere.com | Reranking search results over your workspace | Search queries and the matching code or document excerpts | United States |
| Serper.devserper.dev | Grounded web search during discovery | Search queries derived from your ideation brief | United States |
| Tavilytavily.com | Alternative web-search provider for grounded discovery | Search queries derived from your ideation brief | United States |
| GitHubgithub.com | Repository hosting and Git integration (GitHub App and sign-in) | Repository contents and metadata for the repositories you connect | United States |
| Hetznerhetzner.com | Cloud hosting and infrastructure | All service data — databases, backups, and logs | Germany (EU) |
| Cloudflare R2cloudflare.com | Object storage for uploads and artifacts | Files you upload and generated artifacts | European Union |
| Paddlepaddle.com | Merchant of Record — payments, tax, and invoicing | Billing identity, payment method (held by Paddle, not us), and transaction history | United Kingdom |
| PostHogposthog.com | Product analytics | Usage events and approximate device data (EU-hosted, memory-only persistence) | European Union |
| Sentrysentry.io | Error monitoring | Error reports, stack traces, and request metadata | United States |
| Pydantic Logfirepydantic.dev | Application tracing and observability | Request traces and diagnostic metadata | United States |
| Transactional email relay (SMTP) | Transactional email delivery | Your email address and the content of the messages we send you | European Union |
| Googlegoogle.com | Sign in with Google | Your Google account email and profile name | United States |
| NetBird (self-hosted by Swazona)netbird.io | Mesh network coordination for direct Runner connections | Peer identifiers and connection metadata (self-hosted by Swazona) | Germany (EU) |
Customer-configured integrations
These providers receive data only if you configure them — bring-your-own model keys or explicit imports. If you never configure them, nothing is sent to them.
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| z.ai (GLM) · Alibaba DashScope · Google Gemini · Ollama (local) | Bring-your-own model providers for codebase audits | The audit's prompts and code context, sent with your own API key | Per your configuration |
| ClickUpclickup.com | Task import from your ClickUp workspace | Task titles and descriptions you choose to import | United States |