Sub-processors
The companies that process personal data for us to run Plait.
Last updated: 11 November 2026
Muon Core Ltd uses the providers below to host and run Plait. Each may process personal data only on our instructions and only to provide its service to us. For how we use personal data, see the privacy policy.
| Provider | What they do for us | Data location | Transfer safeguard |
|---|---|---|---|
| DigitalOcean, LLC | Hosts the Plait web app (App Platform) and its database (Managed PostgreSQL), including backups | London, UK (lon1) | Data stored in the UK. For any access from the US: UK–US data bridge |
| Cloudflare, Inc. | DNS, hosting of the plait.run website (Pages), downloads and media storage (R2), email routing for plait.run addresses | Global network. Downloads and media storage (public installers and marketing videos, no workspace data) in Western Europe | UK–US data bridge; UK adequacy regulations for storage in the EEA |
| Postmark (ActiveCampaign, LLC) | Sends service email from [email protected] | United States | UK–US data bridge |
| GitHub, Inc. | Hosts desktop app releases and the supervisor container image | United States | UK–US data bridge |
Services you choose
These services receive data because you choose to use them. They are not our sub-processors: each has its own terms and privacy policy, which apply to that data.
| Service | When data goes to it |
|---|---|
| Google, GitHub, Microsoft, or your organisation’s single sign-on | When you sign in with that provider. It tells us who you are. |
| Integrations you connect (for example Slack, GitHub, Plane) | When you or your agents read from or write to that service. |
| Your AI provider (for example Anthropic or OpenAI) | When your agents run. Your executor calls the provider directly with your own credentials; it does not go through our servers. |
| Your browser’s push service | When you turn on notifications. The notification content is encrypted. |
Changes to this list
Before we add or replace a sub-processor, we will update this page and email the administrators of every organisation at least 14 days in advance, as set out in our Data Processing Agreement. Organisations may object during that period. If you have a question, email [email protected].