Legal / Updated 28 July 2026

Subprocessors

Services that may process limited data when their corresponding Ontoly Cloud feature is enabled.

Hosting and database

The production hosting and PostgreSQL providers will process application requests, account records, access requests, booking records, and generated artifacts. Named production vendors and regions must be published here before launch.

Better Auth

Better Auth is an application library used to implement identity and sessions. Authentication records are stored in Ontoly's configured PostgreSQL database; Better Auth is not a separate hosted identity processor in this architecture.

Resend

Resend sends access-request, booking, invitation, verification, and password-reset emails. It receives recipient addresses, message content, and delivery metadata required for those messages.

Source control

A connected source-control provider may process repository authorization and webhook metadata only after a user explicitly enables the integration.

Model providers

Configured model providers may receive bounded evidence packs for explanation features. Raw repository upload is not the default model boundary. Provider use remains feature-specific and must be disclosed in workspace settings.

Updates

Material production subprocessor additions will be posted here before their use where practicable. Questions can be sent to hello@sarwagya.wtf.