Current subprocessors
Grupo Impulso Digital S.A. de C.V. ("we") engages the subprocessors below to provide Gravity. Each is bound by a written agreement with data-protection terms at least as protective as our Data Processing Agreement.
Cloudflare, Inc.
- Service
- Workers, Durable Objects, R2 object storage, Hyperdrive, Vectorize, Workers AI, Browser Rendering, Email Service, Email Routing, DNS and TLS
- What it processes
- All Customer Data in transit and at rest: workspace content, uploaded media, search and memory embeddings (generated with Workers AI), Doc Agent browser sessions, transactional email, edge logs
- Location
- Global edge network; R2 storage in Western North America
Neon (Databricks, Inc.)
- Service
- Managed Postgres, the primary database
- What it processes
- Workspace content, published versions, members, settings, analytics, Ask AI turns
- Location
- United States (AWS us-east-2, Ohio)
Anthropic, PBC
- Service
- Large language models, when the workspace uses the Anthropic provider or Origin routes a call to Anthropic
- What it processes
- Prompts built from Customer Data (page content, source excerpts sent by the CLI or Doc Agent, Ask AI questions) and model output
- Location
- United States
OpenAI, L.L.C.
- Service
- Large language models, when the workspace uses the OpenAI provider or Origin routes a call to OpenAI
- What it processes
- Same as Anthropic
- Location
- United States
Google LLC
- Service
- Vertex AI models (Gemini, and Claude served on Vertex AI), when Origin, the Impulso AI gateway, routes a call there
- What it processes
- Same as Anthropic, routed per call
- Location
- Global: the Vertex AI global endpoint, with no fixed region
Functional Software, Inc. (Sentry)
- Service
- Error monitoring for the app, the API and this site
- What it processes
- Error reports: stack traces, request URL, browser and device data, user id and email when signed in
- Location
- United States
PostHog, Inc.
- Service
- Product and reader analytics
- What it processes
- Page views and product events, device and browser data, pseudonymous identifiers
- Location
- United States
Stripe, Inc.
- Service
- Payments and invoicing, through Meridian, the Impulso billing service
- What it processes
- Billing contact, plan, invoices, payment method (held by Stripe; never by Gravity)
- Location
- United States
GitHub, Inc.
- Service
- GitHub App platform and REST API, used by the Gravity GitHub App
- What it processes
- Repository metadata and file contents read to generate documentation; the setup pull request, workflow file and repository secret the app writes when you ask it to
- Location
- United States
Resend, Inc.
- Service
- Transactional email sent by Polaris (sign-in and invitations) and by Ember (contact form)
- What it processes
- Recipient email address, name, message content
- Location
- United States
Amazon Web Services, Inc.
- Service
- Hosting for Origin, the Impulso AI gateway; the audit log’s cold-storage archive (S3); the optional analytics replica of the audit log (ClickHouse), when enabled
- What it processes
- Prompts and model output passing through Origin; audit events: actor id and email, action, resource, IP address, user agent
- Location
- Canada (ca-central-1, Montréal) for Origin and the analytics replica; United States (us-east-1) for the audit archive
Impulso services
Some parts of Gravity are provided by other services operated by us or our affiliates. They are not third parties, but we list them so your review covers every system that touches your data.
Polaris
- Role
- Identity: sign-in, SSO (SAML / OIDC), SCIM, organisations and memberships; the tamper-evident audit log and its cold-storage archive
- Runs on
- Cloudflare (D1, R2, Queues), Resend; AWS (S3 cold-storage archive, optional ClickHouse replica)
Origin
- Role
- AI gateway that routes model calls for workspaces using the Origin provider
- Runs on
- AWS in Canada (ca-central-1, Montréal), behind Cloudflare; upstream model providers listed above
Ember
- Role
- Form intake and relay for the gravitydocs.io contact form
- Runs on
- Cloudflare, Resend
Meridian
- Role
- Subscription billing and entitlements
- Runs on
- Stripe
Services you connect
These are not our subprocessors. They process data under your own agreement with them, because you choose to connect them:
- Your source host account, such as GitHub or GitLab, which holds your repositories and runs the Gravity CLI in your CI. The calls the Gravity GitHub App makes to GitHub on our side are covered by the GitHub, Inc. entry above.
- Your identity provider, such as Okta or Microsoft Entra, when you configure SSO.
- An AI provider account whose API key you add to your workspace ("bring your own key"). Calls made with your key are governed by your terms with that provider.
- Webhook endpoints you configure to receive notifications.
Changes to this list
We give at least 30 days’ notice before a new subprocessor starts processing Customer Data, by updating this page and emailing the account owners who subscribed to updates. You may object on reasonable data-protection grounds as described in the DPA.
To subscribe to updates or ask about a subprocessor, write to contact@gravitydocs.io.