Subprocessors
These are the companies that process customer data so we can run StrikeWard. We will update this list before adding a new provider that handles customer content.
Last updated 5 November 2026
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase, Inc. | Managed database, authentication and private file storage | Account details and all customer content | United States (servers run on Amazon Web Services) |
| Amazon Web Services, Inc. | Cloud infrastructure behind the database and file storage | Account details and all customer content (encrypted in transit) | Region of the database |
| Cloudflare, Inc. | Global edge hosting for the application and secure DNS lookups | Requests, IP addresses, domain names being checked | Global |
| Lovable (Lovable Labs Incorporated) | Application platform: AI gateway for the assistant and threat modelling, and transactional email delivery | Assistant questions and the records needed to answer them; recipient email addresses and message content | European Union / United States |
| OpenAI, L.L.C. | AI model behind the assistant and threat modelling, reached through the Lovable AI gateway with storage off and no training | Assistant questions and the records needed to answer them | United States |
| Google LLC (OSV) | Open-source vulnerability lookups for imported software bills of materials | Package names and versions only | United States / global |
| Certificate transparency and DNS lookups (Cloudflare DNS, Cert Spotter) | Public lookups for domains you have verified | Domain names only | Global |
Questions about this list: privacy@strikeward.com.