AutoGPT Subprocessors
Last updated: July 30, 2026
The AutoGPT Platform at platform.agpt.co (our Platform), including the AutoGPT apps for third-party messaging platforms, is provided by Determinist Ltd trading as “AutoGPT” (we, our or us). To deliver our Platform we engage the third-party subprocessors listed below. Subprocessors are vendors we engage that may process customer personal data on our behalf. We review this list periodically and update it as our vendors change. Questions about our subprocessors can be sent to privacy@agpt.co. This page forms part of the privacy documentation for our Platform, alongside our Platform Privacy Policy and Platform Terms of Use. To receive notice of changes to this list, email privacy@agpt.co with the subject “Subscribe to subprocessor updates.” We will provide notice of new subprocessors before they begin processing customer personal data, and customers may raise objections as described in our data processing terms. Where personal data originating from the EEA or UK is transferred to subprocessors outside those regions, we rely on appropriate safeguards such as Standard Contractual Clauses or, where the recipient is certified, the EU–U.S. Data Privacy Framework.
Infrastructure and hosting
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud hosting, managed databases, file and media storage, messaging, logging and monitoring | All Platform data, including account data, agent graphs, workspace files and uploaded media | United States (us-central1) |
| Vercel Inc. | Frontend application hosting, web analytics and performance monitoring | Account data, usage data and requests passing through frontend routes | United States / global edge network |
| Cloudflare, Inc. | DNS, DDoS protection and SSL termination | Network traffic metadata | Global |
| Supabase, Inc. | Managed PostgreSQL database and authentication | Account data (email address, authentication identifiers) and Platform application data | United States (AWS us-east-2) |
| GitHub, Inc. (Microsoft Corporation)* | Source code hosting and CI/CD | Build artifacts (no customer data) | United States |
Payments
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscriptions and invoicing | Name, email address, payment details and billing history | United States |
AI and model providers
These vendors receive customer content (such as prompts, agent inputs and outputs, and files) when customers use Platform-provided AI credentials rather than their own API keys. Under our API agreements with OpenAI and Anthropic, customer content submitted through the API is not used to train their models. We do not opt in to any data-sharing or training programs offered by our AI subprocessors.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| OpenAI, L.L.C. | Large language model inference, embeddings and voice transcription | Prompts, completions, embedded content and audio | United States |
| Anthropic, PBC | Large language model inference (including our in-platform assistant, AutoPilot) | Prompts and completions | United States |
| OpenRouter, Inc. | Large language model gateway | Prompts and completions routed to underlying model providers | United States |
| Groq, Inc. | Large language model inference | Prompts and completions | United States |
| NVIDIA Corporation | Language and vision model inference | Prompts, completions and images | United States |
| E2B (FoundryLabs, Inc.) | Sandboxed code execution | Customer-generated code and execution data | United States |
| Replicate, Inc. | Hosted model inference (image and media generation) | Generation prompts and outputs | United States |
| fal (Features and Labels, Inc.) | Media generation | Generation prompts and outputs | United States |
| Ideogram AI, Inc. | Image generation | Generation prompts and outputs | Canada |
| Exa Labs, Inc. | Web search | Search queries from agent runs | United States |
| Jina AI GmbH (an Elastic N.V. company) | Embeddings and web reading | Content submitted for embedding or reading | Germany |
| Firecrawl (SideGuide Technologies, Inc.) | Web scraping | URLs and scraped content from agent runs | United States |
Business and agent-service APIs
These vendors power specific Platform features and agent blocks using Platform-managed credentials.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Ayrshare (Neverminds Solution LLC) | Social media posting via managed profiles | Customer social media content and linked-profile tokens | United States |
| Google Maps Platform (Google LLC) | Geocoding and places data | Location queries | United States |
| DataForSEO OÜ | SEO and search results data | Search queries | Estonia (hosting in the United States and Germany) |
| Webshare Software Company | Proxy service for agent web access | Proxied request traffic | United States / Lithuania |
| Apollo.io (ZenLeads Inc.) | Business contact enrichment | Contact and company lookup queries | United States |
| SmartLead (521 Products Pty Ltd) | Email sequencing | Campaign and recipient data configured by customers | Australia |
| ZeroBounce (Hertza L.L.C.) | Email address validation | Email addresses submitted for validation | United States |
| Tally BV | Form data collection | Form responses | Belgium (EU-only storage) |
| Linear Orbit, Inc. | Feature-request intake | Feature-request text filed on customers' behalf | United States |
Monitoring, analytics and communications
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | Error tracking | Error and crash reports, which may incidentally contain user identifiers | United States |
| Grafana Labs* | Infrastructure metrics and alerting | Operational metrics (no direct customer content) | United States |
| Langfuse GmbH | LLM observability and prompt management | AutoPilot prompts, completions and trace metadata | European Union |
| PostHog, Inc. | Product analytics | Usage events and user identifiers | European Union (EU-hosted instance; PostHog, Inc. is a US provider) |
| Google Analytics (Google LLC)† | Website analytics (marketing site) | Usage and device data | United States |
| LaunchDarkly (Catamorphic Co.) | Feature flags | User identifiers and attributes used for flag targeting | United States |
| Postmark (ActiveCampaign, LLC) | Transactional email | Email address and notification content | United States |
| MailerLite (UAB MailerLite) | Marketing and product-update email | Name, email address and engagement data | European Union (Lithuania) |
| Google Workspace (Google LLC) | Business email and support inbox | Email content of correspondence with us, which may contain personal data users choose to include | United States / global |
* Listed for transparency; these vendors support our Platform but do not process customer personal data in the ordinary course. † Website visitor analytics for our marketing site, governed by our cookie and privacy notices rather than customer-data subprocessing.
Customer-connected integrations and channels
Our Platform lets customers connect their own accounts with third-party services (for example GitHub, Google, Notion, Twitter/X, Reddit, Todoist, Airtable and WordPress) and supply their own API keys for AI and service blocks. When a customer connects such a service, data is transferred at the customer’s direction under the customer’s own agreement with that provider. These customer-directed transfers are not subprocessor relationships and are not listed above.
Customers may also choose to interact with AutoGPT through optional third-party messaging platforms, including Slack, Discord and Telegram. These channels are never required to use our Platform: the customer initiates the connection (for example by installing the AutoGPT app in their Slack workspace or starting a conversation with an AutoGPT bot), and message content is exchanged with the platform solely to deliver the conversation the customer requested. Each platform processes that data under the customer’s own agreement with it, acting as a service chosen by the customer rather than as one of our subprocessors. We also operate public community spaces — including a Discord server — where we share product releases, updates and community discussion. Participation is optional and initiated by the user; content shared in those spaces is processed by the relevant platform under the user’s own agreement with it.