Sub-processor updates
This page lists the third parties (sub-processors) TestingBot engages to deliver the service, including their function and location, and records changes to that list. As described in our Data Processing Addendum, we give prior notice of any new sub-processor by updating this page. Subscribe below to be notified, you then have 14 days to raise any reasonable objection. For changes that materially affect a critical or important function under DORA, we give 30 days advance notice; see the DORA Art. 30 pack.
Get notified of sub-processor changes
We will email you whenever we add or change a sub-processor. Double opt-in; unsubscribe any time.
General sub-processors
| Vendor | Purpose | Location |
|---|---|---|
|
Sentry
Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United States |
Error tracking
Application error reports; may include an account email or IP address in stack-trace context. No test artefacts. |
Europe |
|
Cloudflare
101 Townsend Street, San Francisco, CA 94107, United States |
CDN, security and object storage (R2)
Request metadata and IP addresses for CDN and WAF; cached static assets; encrypted test artefacts in R2 object storage (EU jurisdiction). |
USA |
|
Unix-Solutions
Hoge Wei 37, 1930 Zaventem, Belgium |
Hosting
Hosts our EU infrastructure; account and test data at rest, encrypted. |
Europe |
|
Hetzner
Industriestr. 25, 91710 Gunzenhausen, Germany |
Hosting and object storage
Hosts our EU infrastructure; account and test data at rest, encrypted; encrypted test artefacts in object storage (Helsinki, Finland). |
Europe |
|
Flow Swiss AG
Dufourstrasse 49, 8008 Zürich, Switzerland |
Hosting (Swiss macOS device infrastructure)
Hosts our Swiss Mac mini fleet; account and test data at rest, encrypted. |
Switzerland |
|
Amazon Web Services, Inc.
410 Terry Avenue North, Seattle, WA 98109, United States |
Storage (S3, EU region)
Encrypted test artefacts (video, screenshots, logs) stored in the EU region (eu-west-1, Ireland). |
Europe |
|
Google LLC (Google Cloud)
1600 Amphitheatre Parkway, Mountain View, CA 94043, United States |
Geolocation Testing + AI Testing
Geolocation test routing; for AI features, masked text-only test logs. No model training. |
Europe and USA |
|
Stripe Inc.
354 Oyster Point Boulevard, South San Francisco, CA 94080, United States |
Payment processing
Billing contact and card handled by Stripe; we store the last 4 digits only, never the full card. |
USA |
|
Bright Market, LLC (FastSpring)
801 Garden Street, Santa Barbara, CA 93101, United States |
Payment processing
Billing contact and payment details for purchases processed through FastSpring. |
USA |
|
Vonage America, LLC
101 Crawfords Corner Road, Holmdel, NJ 07733, United States |
SMS delivery (two-factor authentication and alerts)
Phone numbers and SMS message content for account verification and alerting. |
USA |
|
ActiveCampaign, LLC (Postmark)
1 North Dearborn Street, 5th Floor, Chicago, IL 60602, United States |
Transactional email delivery (Postmark)
Account name and email address for transactional and product emails. |
USA |
|
Intercom
55 2nd Street, 4th Fl., San Francisco, CA 94105, United States |
Customer support
Name, email address and the content of support conversations. |
USA |
Feature-specific sub-processors
Used only by specific features within TestingBot products.
| Vendor | Purpose | Location |
|---|---|---|
| OpenAI, L.L.C. |
AI Testing
Masked, text-only test context for codeless AI test generation. Opt-in. No model training. |
USA |
| Anthropic, PBC |
AI test failure analysis (AI Insights)
Masked, text-only failing-test logs for failure analysis. Opt-in. No model training; deleted within 30 days. |
USA |
Change log
-
Added Flow Swiss AG (Switzerland), which hosts our Swiss Mac mini fleet and was engaged before this notice. Clarified that Hetzner object storage is located in Helsinki, Finland. Removed Paddle.com Market Ltd, which was listed in error on July 27, 2026 and is not used to process any customer data.
-
Expanded the register for DORA Art. 28(3): added Bright Market, LLC / FastSpring (USA) and Vonage America, LLC (USA), which were engaged before this notice; clarified that transactional email (Postmark) is provided by ActiveCampaign, LLC; surfaced Cloudflare R2 and Hetzner object storage; corrected the AWS storage region to eu-west-1 (Ireland).
-
Added Anthropic, PBC (USA) as a sub-processor for the AI Insights test failure analysis feature.
See the full TestingBot Trust Center for security and compliance documentation.