List of Subprocessors
Effective Date: Feb 16, 2026 · Last updated: Oct 12, 2026
Tembo Data Systems, Inc. ("Tembo") uses the following third-party subprocessors to deliver our services. This page is maintained in accordance with our Data Processing Addendum and provides transparency about the entities that may process customer data on our behalf.
We will notify customers of any intended changes to subprocessors at least fourteen (14) days in advance, as described in our DPA. If you have questions about our subprocessors, please contact us at privacy@tembo.io.
Infrastructure and Hosting
Amazon Web Services (AWS)
Purpose: Cloud infrastructure, application hosting, and language model inference via Amazon Bedrock.
Data processed: All customer data, including source code, database metadata, account information, and prompts sent for AI processing.
Location: United States
Leaseweb
Purpose: Dedicated server infrastructure and hosting for agent sandboxes.
Data processed: Source code, workspace files, and session data processed in agent sandboxes.
Location: United States
Pierre (code.storage)
Purpose: Git repository storage and mirroring for connected repositories.
Data processed: Source code, Git history, and repository metadata for connected repositories.
Location: United States
Note: Tembo Self Hosted does not use code.storage. Repositories connected to a self-hosted deployment are never mirrored to Pierre.
AI and Machine Learning
Anthropic
Purpose: Language model inference for AI coding features.
Data processed: Source code context, conversation history, and relevant code snippets sent for AI processing.
Data retention: Zero data retention agreement in place. Anthropic does not train on API data.
Location: United States
OpenAI
Purpose: Language model inference for AI coding features.
Data processed: Source code context and prompts sent for AI processing.
Data retention: API customers are opted out of training by default.
Location: United States
Fireworks
Purpose: Language model inference for AI coding features.
Data processed: Source code context and prompts sent for AI processing.
Location: United States
Authentication and Billing
Clerk
Purpose: User authentication and identity management.
Data processed: User names, email addresses, and authentication credentials.
Location: United States
Stripe
Purpose: Payment processing and subscription billing.
Data processed: Names, billing addresses, and payment card information.
Location: United States
Monitoring and Support
Sentry
Purpose: Application error and exception tracking.
Data processed: Error logs, stack traces, user identifiers, and diagnostic context, which may include personal data contained in error reports.
Location: United States
Pylon
Purpose: Customer support chat and communication.
Data processed: User names, email addresses, user IDs, profile images, and support conversation content.
Location: United States
PostHog
Purpose: Product analytics and feature usage tracking.
Data processed: Usage events, feature interactions, session data, user IDs, email addresses, and usernames.
Location: United States
Infrastructure Note
None of our infrastructure is in China. We do not directly use any Chinese company as a subprocessor, and to our knowledge none of our subprocessors do either. All infrastructure is located in trusted regions with appropriate data protection standards.
Contact
For questions about our subprocessors or to be notified of changes, please contact us at: privacy@tembo.io
Tembo Data Systems, Inc.
646 Main St
Cincinnati, OH 45202
United States