Subprocessors

Owlie uses a small set of third-party service providers (“subprocessors”) to deliver the platform. This page lists each subprocessor, what it does for Owlie, and the categories of data it can process. It was last updated on August 7, 2026.

Cloudflare, Inc.

Primary cloud infrastructure for the entire platform. Every Owlie service runs on Cloudflare Workers, with Durable Objects for stateful coordination, R2 for object storage (tenant file uploads, sync history, encrypted database backups), KV for caching, Queues for ingestion pipelines, Hyperdrive for database connection pooling, Analytics Engine for usage metering, Workers AI and AI Gateway for built-in AI assists, and Cloudflare’s email service for transactional email delivery.

Data processed: all categories of customer data the platform processes, including identity and account records, connector configuration, provisioning, sync, request, and review records, uploaded files, notification content, and application logs.
Location: Cloudflare’s global edge network.

PlanetScale, Inc.

Managed hosting of Owlie’s production PostgreSQL database — the primary persistent store behind every service.

Data processed: all categories of persistent customer data, including identity and account records, connector configuration, provisioning, sync, request, and review records, and audit events.

Amazon Web Services, Inc.

AWS Key Management Service only. AWS KMS wraps and unwraps the root key that anchors Owlie’s per-tenant encryption-key hierarchy.

Data processed: sealed root-key material only. No tenant data and no tenant key material is sent to AWS.

Together AI (Together Computer, Inc.)

Language-model inference for the Owlie AI assistant, when the assistant is used.

Data processed: assistant conversation content — prompts, message history, and tool-call payloads, which can include tenant configuration details and any text an administrator types into the assistant.

Slack Technologies, LLC (a Salesforce company)

Delivery of Owlie’s Slack features, for customers who connect Slack: notifications delivered into the customer’s Slack workspace, and the Owlie assistant when used through Slack.

Data processed: notification content and recipients, and assistant conversation content posted into the customer’s Slack workspace.

Axiom, Inc.

Centralized logging and observability for Owlie’s infrastructure.

Data processed: execution metadata and application logs, which may include tenant and identity identifiers.
Location: United States (log ingest).

Stripe, Inc. — planned

Stripe will be Owlie’s payment processor for customer billing, effective from billing launch. It is listed here ahead of activation so this page reflects the change before any billing data flows.

Data processed (from billing launch): billing contact and subscription information. Payment card details will be collected by Stripe directly and will not be stored by Owlie.

Changes to this list

We update this page when we add or replace a subprocessor, and provide notice as described in our Data Processing Agreement. Hosting regions and data-residency details for each subprocessor are being finalized and will be added to this page.

Questions about this list can be sent to security@owlie.com.