Legal
Subprocessors
The third parties that process customer data to provide Apex Actions, what each does, and where. Updated with thirty days' notice before a change.
Last updated
These are the providers that process customer data on our behalf to provide the service, as the data processing agreement describes. We give at least thirty days' notice before adding or replacing one, by updating this page and writing to the e-mail address on the account.
Subprocessors
| Provider | What it does for us | Where | Data it processes |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosts the whole service: the control plane, the runners that execute jobs, the database, and the storage for logs, artifacts and caches | US East (N. Virginia), United States | Everything the service holds — repository data, logs, artifacts, caches, account and billing records, audit and agreement records |
| Stripe, Inc. | Collects payment and holds payment methods. We never see or store a card number | United States | Account e-mail address and organisation name, plan, invoices and payment status; the card details you enter into Stripe's own form |
Third parties you use with us
These are not subprocessors: you have your own agreement with each, and the service exchanges data with them because you have asked it to.
| Provider | Why data flows to it |
|---|---|
| GitHub, Inc. | The service is built on GitHub. It reads what the App is permitted to read, and sends check-run results, statuses and annotations back to your repositories. Your agreement with GitHub governs what GitHub does with them |
| Notification destinations | A notification rule you configure posts what it says to the destination you named — a Slack or Teams webhook, or any HTTPS endpoint |
| Publishers of actions, images and packages | A workflow that references a third-party action, container image or package causes the service to fetch it from where its publisher hosts it. The request carries what the publisher's protocol requires and no more |
Changes
| Date | Change |
|---|---|
| 2026-09-04 | First published |