Gitpod GmbH
Subprocessors (24)
Processed Jul 29, 2026 · source disclosure ↗
| vendor | purpose | evidence |
|---|---|---|
| Cloud infrastructure | “cloud service provider (namely: Google Cloud Platform and/or Amazon Web Services) on servers outside the EU” source | |
| Anthropic San Francisco, CA 94104, USA | AI coding agent processing | “Provider details: Anthropic PBC, 548 Market Street, PMB 45043, San Francisco, CA 94104, USA. Privacy policy: https://www.anthropic.com/legal/privacy” source |
| Ashby USA | Job Applications | “Use of Ashby: The Recruting Platform provider "Ashby" by Ashby, Inc., 548 Market St PMP 397006 San Francisco, CA 94104-5401 processes the data mentioned above to enable us to review your job application. For more information, refer to https://www.ashbyhq.com/resources/privacy.” source |
| Clay San Francisco, CA 94114, USA | Business contact information enrichment | “We also use Clay, a service provided by Clay Software, Inc., 2261 Market Street #4451, San Francisco, CA 94114, USA, to enrich business contact information associated with Ona user accounts.” source |
| Customer.io USA | Emails and Newsletters | “Use of Customer.io: The mail provider "Customer.io" by Peaberry Software Inc., 921 SW Washington Street Suite 820 Portland, OR 97205, USA receives and processes on our behalf the data necessary for the emails and newsletters, in particular the email address. Customer.io provides Data Residency in the EU. For more information, refer to https://customer.io/legal/privacy-policy/ .” source |
| Recording and analyzing meeting transcripts for sales and support sessions | “We use Gong, provided by Gong.io, Ltd., for recording and analyzing meeting transcripts during sales conversations and user support sessions.” source | |
| Google Ireland, USA | User Behavior Tracking | “We use the Google Tag Manager service offered by Google (inter alia Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA ("Google"). Google Tag Manager is a code snippet that facilitates tracking of user behavior across our website. This functionality is leveraged to enhance the precision of our targeted campaigns and offerings. The related data collected is used for website improvements and optimizing remarketing campaigns.” source |
| Cloud infrastructure | “cloud service provider (namely: Google Cloud Platform and/or Amazon Web Services) on servers outside the EU” source | |
| LinkedIn USA | Conversion Tracking | “We use LinkedIn Conversion Tracking, a service offered by LinkedIn Corporation. We utilize this service to measure the effectiveness of our LinkedIn advertising campaigns and understand the actions taken by users after clicking on our ads. The information collected includes data such as IP addresses, device and browser characteristics, and interaction details.” source |
| Metabase USA | Usage Data Analysis | “We use Metabase, provided by Metabase, Inc., to explore and analyse usage data that may contain data captured by Segment from the Website and Product. Metabase operates in compliance with the GDPR (https://metabase.com/security).You can also find more information in Metabase's privacy policy: https://metabase.com/privacy/.” source |
| Metronome San Francisco, CA 94104, USA | Payment processing | “Metronome (by Metronome, Inc., 548 Market Street, PMB 72296, San Francisco, CA 94104, USA; more information: https://metronome.com/privacy (https://metronome.com/privacy))” source |
| Delivering documentation content, processing technical data (IP address, URLs, etc.) for security, abuse prevention, and content improvement | “Our documentation pages available under https://ona.com/docs are provided through the documentation platform "Mintlify" by Mintlify, Inc., 108 Ferris Pl, Ithaca, NY 14850, USA. When you visit these documentation pages, Mintlify processes the data that are technically necessary to deliver the content, maintain security and prevent abuse.” source | |
| MixPanel USA | User Behavior Analysis | “We use Mixpanel, provided by Mixpanel, Inc., as data sink for Segment for the analysis of user behaviour in order to offer the best experience to our users. Mixpanel operates in compliance with the GDPR.” source |
| Video content delivery | “Video content related to product onboarding is provided by Mux.” source | |
| OpenAI Ireland Ltd Dublin, D01 YC43, Ireland, San Francisco, CA 94158, USA | AI coding agent processing | “Provider details: OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland; and OpenAI OpCo, LLC, 1455 Third Street, San Francisco, CA 94158, USA, as applicable. Data processing addendum: https://openai.com/policies/data-processing-addendum Business data information: https://openai.com/business-data/” source |
| OpenAI OpCo, LLC San Francisco, CA 94158, USA | AI coding agent processing | “Provider details: OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland; and OpenAI OpCo, LLC, 1455 Third Street, San Francisco, CA 94158, USA, as applicable. Data processing addendum: https://openai.com/policies/data-processing-addendum Business data information: https://openai.com/business-data/” source |
| Managing client inquiries and emails through support system/widget, processing data for customer support | “We use the support system and widget provided by Pylon Labs, Inc., 188 King Street - #502 San Francisco, CA 94107 United States receives and processes on our behalf the data necessary to manage client inquiries and emails.” source | |
| Reo Dev, Inc USA | Website Analytics | “We use the services of Devenue Inc. (doing business as Reo.dev), located at 838 Walker Rd., Suite 21-2, Dover, Delaware, 19904, County of Kent, USA, to analyze the use of our Website. This helps us understand which of our services are of most interest to users and improve our product offerings.” source |
| Safebase USA | Trust Center | “Use of Safebase: The Trust Center provider "Safebase" by Safebase Inc., 441 43rd Avenue, San Francisco, CA 94121, United States of America, processes on our behalf the data necessary to display content and provide you with security documentation, in particular the name, email address and company name. For more information, refer to https://safebase.io/privacy.” source |
| Salesforce USA | Customer Relationship Management | “We use Salesforce, provided by Salesforce, Inc. as our Customer Relationship Management System, which is also integrated with the contact forms on this website. The information stored in this system includes contact data such as your name, email or phone number and associated organisation (where applicable). You can also find more information in Salesforce's privacy policy: https://www.salesforce.com/eu/company/privacy/full_privacy/” source |
| Segment USA | User Data Capture | “We use Segment, provided by Segment.io, Inc., on our Website and Product to capture marketing- and product-related user information in order to offer the best experience to our users. Segment operates in compliance with the GDPR (https://segment.com/docs/privacy/complying-with-the-gdpr/).You can also find more information in Segment's privacy policy: https://segment.com/legal/privacy/ (https://segment.com/legal/privacy/).OPT-OUT: You can deactivate the capturing of user-specific Website data by enabling the "Do Not Track" (https://allaboutdnt.com/) setting in your web browser. You may follow the instructions in this guide (https://allaboutdnt.com/#adjust-settings).” source |
| Stripe Dublin, Irland, San Francisco, CA 94104, USA | Payment processing | “we use the payment services by Stripe (for EU/EEA: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland; more information: https://stripe.com/de/privacy (https://stripe.com/de/privacy); contact: https://stripe.com/contact (https://stripe.com/contact))” source |
| Phone number verification | “When registering for a Ona account, we use Twilio Verify, provided by Twilio, Inc. as our phone number and user account verification service to detect fraud and abuse” source | |
| Hosting and delivering the Website, processing technical data (IP address, URLs, etc.) for stability, security, and performance | “Our Website and certain parts of the Ona Website are hosted and delivered using the cloud platform provider "Vercel" by Vercel Inc. Vercel processes the data that are technically necessary to deliver our Website to your browser and to ensure stability and security.” source |
-
Cloud infrastructure
“cloud service provider (namely: Google Cloud Platform and/or Amazon Web Services) on servers outside the EU” source
- AnthropicSan Francisco, CA 94104, USA
AI coding agent processing
“Provider details: Anthropic PBC, 548 Market Street, PMB 45043, San Francisco, CA 94104, USA. Privacy policy: https://www.anthropic.com/legal/privacy” source
- AshbyUSA
Job Applications
“Use of Ashby: The Recruting Platform provider "Ashby" by Ashby, Inc., 548 Market St PMP 397006 San Francisco, CA 94104-5401 processes the data mentioned above to enable us to review your job application. For more information, refer to https://www.ashbyhq.com/resources/privacy.” source
- ClaySan Francisco, CA 94114, USA
Business contact information enrichment
“We also use Clay, a service provided by Clay Software, Inc., 2261 Market Street #4451, San Francisco, CA 94114, USA, to enrich business contact information associated with Ona user accounts.” source
- Customer.ioUSA
Emails and Newsletters
“Use of Customer.io: The mail provider "Customer.io" by Peaberry Software Inc., 921 SW Washington Street Suite 820 Portland, OR 97205, USA receives and processes on our behalf the data necessary for the emails and newsletters, in particular the email address. Customer.io provides Data Residency in the EU. For more information, refer to https://customer.io/legal/privacy-policy/ .” source
-
Recording and analyzing meeting transcripts for sales and support sessions
“We use Gong, provided by Gong.io, Ltd., for recording and analyzing meeting transcripts during sales conversations and user support sessions.” source
- GoogleIreland, USA
User Behavior Tracking
“We use the Google Tag Manager service offered by Google (inter alia Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA ("Google"). Google Tag Manager is a code snippet that facilitates tracking of user behavior across our website. This functionality is leveraged to enhance the precision of our targeted campaigns and offerings. The related data collected is used for website improvements and optimizing remarketing campaigns.” source
-
Cloud infrastructure
“cloud service provider (namely: Google Cloud Platform and/or Amazon Web Services) on servers outside the EU” source
- LinkedInUSA
Conversion Tracking
“We use LinkedIn Conversion Tracking, a service offered by LinkedIn Corporation. We utilize this service to measure the effectiveness of our LinkedIn advertising campaigns and understand the actions taken by users after clicking on our ads. The information collected includes data such as IP addresses, device and browser characteristics, and interaction details.” source
- MetabaseUSA
Usage Data Analysis
“We use Metabase, provided by Metabase, Inc., to explore and analyse usage data that may contain data captured by Segment from the Website and Product. Metabase operates in compliance with the GDPR (https://metabase.com/security).You can also find more information in Metabase's privacy policy: https://metabase.com/privacy/.” source
- MetronomeSan Francisco, CA 94104, USA
Payment processing
“Metronome (by Metronome, Inc., 548 Market Street, PMB 72296, San Francisco, CA 94104, USA; more information: https://metronome.com/privacy (https://metronome.com/privacy))” source
-
Delivering documentation content, processing technical data (IP address, URLs, etc.) for security, abuse prevention, and content improvement
“Our documentation pages available under https://ona.com/docs are provided through the documentation platform "Mintlify" by Mintlify, Inc., 108 Ferris Pl, Ithaca, NY 14850, USA. When you visit these documentation pages, Mintlify processes the data that are technically necessary to deliver the content, maintain security and prevent abuse.” source
- MixPanelUSA
User Behavior Analysis
“We use Mixpanel, provided by Mixpanel, Inc., as data sink for Segment for the analysis of user behaviour in order to offer the best experience to our users. Mixpanel operates in compliance with the GDPR.” source
-
Video content delivery
“Video content related to product onboarding is provided by Mux.” source
- OpenAI Ireland LtdDublin, D01 YC43, Ireland, San Francisco, CA 94158, USA
AI coding agent processing
“Provider details: OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland; and OpenAI OpCo, LLC, 1455 Third Street, San Francisco, CA 94158, USA, as applicable. Data processing addendum: https://openai.com/policies/data-processing-addendum Business data information: https://openai.com/business-data/” source
- OpenAI OpCo, LLCSan Francisco, CA 94158, USA
AI coding agent processing
“Provider details: OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland; and OpenAI OpCo, LLC, 1455 Third Street, San Francisco, CA 94158, USA, as applicable. Data processing addendum: https://openai.com/policies/data-processing-addendum Business data information: https://openai.com/business-data/” source
-
Managing client inquiries and emails through support system/widget, processing data for customer support
“We use the support system and widget provided by Pylon Labs, Inc., 188 King Street - #502 San Francisco, CA 94107 United States receives and processes on our behalf the data necessary to manage client inquiries and emails.” source
- Reo Dev, IncUSA
Website Analytics
“We use the services of Devenue Inc. (doing business as Reo.dev), located at 838 Walker Rd., Suite 21-2, Dover, Delaware, 19904, County of Kent, USA, to analyze the use of our Website. This helps us understand which of our services are of most interest to users and improve our product offerings.” source
- SafebaseUSA
Trust Center
“Use of Safebase: The Trust Center provider "Safebase" by Safebase Inc., 441 43rd Avenue, San Francisco, CA 94121, United States of America, processes on our behalf the data necessary to display content and provide you with security documentation, in particular the name, email address and company name. For more information, refer to https://safebase.io/privacy.” source
- SalesforceUSA
Customer Relationship Management
“We use Salesforce, provided by Salesforce, Inc. as our Customer Relationship Management System, which is also integrated with the contact forms on this website. The information stored in this system includes contact data such as your name, email or phone number and associated organisation (where applicable). You can also find more information in Salesforce's privacy policy: https://www.salesforce.com/eu/company/privacy/full_privacy/” source
- SegmentUSA
User Data Capture
“We use Segment, provided by Segment.io, Inc., on our Website and Product to capture marketing- and product-related user information in order to offer the best experience to our users. Segment operates in compliance with the GDPR (https://segment.com/docs/privacy/complying-with-the-gdpr/).You can also find more information in Segment's privacy policy: https://segment.com/legal/privacy/ (https://segment.com/legal/privacy/).OPT-OUT: You can deactivate the capturing of user-specific Website data by enabling the "Do Not Track" (https://allaboutdnt.com/) setting in your web browser. You may follow the instructions in this guide (https://allaboutdnt.com/#adjust-settings).” source
- StripeDublin, Irland, San Francisco, CA 94104, USA
Payment processing
“we use the payment services by Stripe (for EU/EEA: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland; more information: https://stripe.com/de/privacy (https://stripe.com/de/privacy); contact: https://stripe.com/contact (https://stripe.com/contact))” source
-
Phone number verification
“When registering for a Ona account, we use Twilio Verify, provided by Twilio, Inc. as our phone number and user account verification service to detect fraud and abuse” source
-
Hosting and delivering the Website, processing technical data (IP address, URLs, etc.) for stability, security, and performance
“Our Website and certain parts of the Ona Website are hosted and delivered using the cloud platform provider "Vercel" by Vercel Inc. Vercel processes the data that are technically necessary to deliver our Website to your browser and to ensure stability and security.” source