Sub-processors

Who we share data with (almost no one)

The core fastpace runtime runs on the developer's machine. The sub-processor list is short on purpose. Subscribe to be notified when this list changes. Source data: packages/trust-portal/src/data/subprocessors.json (last updated 2026-07-06).

Provider Purpose Region Status

GitHub Source code repository for the open-source project. fastpace itself does not transit customer code through GitHub. US active

Cloudflare DNS + static asset delivery for fastpace.net marketing site and trust.fastpace.net. Global edge active

Anthropic / OpenAI / Google NOT a fastpace sub-processor. fastpace mediates the developer's direct call to the AI runtime they choose; data flows are governed by the developer's own contract with that provider. n/a pass-through

What "pass-through" means

Your developers' AI assistants — Claude Code (Anthropic), Codex (OpenAI), Gemini CLI (Google) — and whichever hosting path serves them (AWS Bedrock, Azure OpenAI, Vertex, direct) are not fastpace sub-processors. fastpace mediates the developer's direct call to the assistant they choose; data flows are governed by your organization's own contract with that provider. The threat model walks the trust boundary explicitly.

Notification SLA

Material changes (new sub-processor, change of region, change of data classes) are announced 30 days in advance via the email list above. Non-material changes (description tweaks, internal contract renewals) are reflected in this file and visible in git history.