Sub-Processor List
Last updated: February 22, 2026
The following third-party sub-processors are engaged by BugZap to process personal data as part of delivering the Service. This list is maintained pursuant to GDPR Article 28(2) and our Data Processing Agreement.
Core Sub-Processors
These sub-processors are used for all BugZap customers:
| Sub-Processor | Purpose | Data Categories | Location | Transfer Mechanism |
|---|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage | Account data, bug reports, screenshots, session replays, metadata | EU (Frankfurt) / US | SCCs |
| Vercel Inc. | Application hosting, serverless functions, edge network | HTTP request data (IP addresses, headers), transient processing of all application data | US (global edge) | SCCs |
| Stripe Inc. | Payment processing, subscription billing | Email, billing address, payment method (handled by Stripe, not stored by BugZap) | US | SCCs |
| Resend Inc. | Transactional email delivery (magic links, notifications) | Email address, email content | US | SCCs |
Optional Sub-Processors
These sub-processors are only engaged when you explicitly enable the corresponding feature or integration in your BugZap project settings:
| Sub-Processor | Feature / Integration | Data Categories | Location | Transfer Mechanism |
|---|---|---|---|---|
| Anthropic PBC | AI Bug Summaries | Bug title, description, severity, console logs (NOT screenshots or recordings) | US | SCCs / DPA with Anthropic |
| Linear Inc. | Linear Integration | Bug title, description, severity, link to BugZap | US | SCCs |
| GitHub Inc. (Microsoft) | GitHub Integration | Bug title, description, severity, link to BugZap | US | SCCs |
| Atlassian Pty Ltd | Jira Integration | Bug title, description, severity, link to BugZap | US / AU | SCCs |
| Slack Technologies (Salesforce) | Slack Integration | Bug title, severity, page URL, link to BugZap | US | SCCs |
| Zapier Inc. | Zapier Integration | Bug title, description, severity, page URL. Note: Zapier may forward data to additional third-party apps configured by you. | US | SCCs |
Changes to This List
We update this page when sub-processors are added, removed, or changed. Material changes are communicated via email to account holders at least 14 days before they take effect, per our Data Processing Agreement Section 5.
Questions
For questions about our sub-processors, contact us at contact@bugzap.dev.