Sub-processors
Last updated 10 October 2026
Sub-processors
RoraLabs uses the following sub-processors for Vigil. We give customers at least 30 days' notice before adding or replacing one (email to the account owner and an update to this page).
| Sub-processor | Location | Purpose | Transfer mechanism |
|---|---|---|---|
| Anthropic, PBC | US | Cloud AI fallback: diagnosis of an endpoint issue (issue text and system context) only when the local model cannot resolve it | UK International Data Transfer Addendum / UK Extension to the EU-US Data Privacy Framework where certified |
| Resend, Inc. | US | Transactional email (admin sign-in, portal and notification email) | UK IDTA / Addendum |
| PostHog (self-hosted by RoraLabs) | UK | Scrubbed product telemetry; no third party receives it | Not applicable (RoraLabs infrastructure) |
| Paddle.com Market Ltd | UK / US | Merchant of Record: payments, invoicing, tax | Paddle acts as an independent controller for payment data |
| Cloudflare, Inc. | Global edge | Network delivery, DDoS protection, DNS | Cloudflare data-protection terms; UK Addendum |
| Hosting: RoraLabs-operated servers | UK | Platform, database, dashboard | Not applicable |
| Hetzner Online GmbH | Germany | Hosting for specific services where used | EU adequacy (UK regulations) |
| Microsoft Corporation | UK / EU | RoraLabs business email (support correspondence) | Microsoft data-protection terms |
Notes
- Anthropic receives data only when the local model cannot resolve an issue and cloud fallback is enabled for the tenant.
- PostHog is operated by RoraLabs on its own server; telemetry is scrubbed server-side.
- Paddle is the Merchant of Record and an independent controller of payment data.
Questions or objections: [email protected].