{"controller":"SigmaShake","contact":"security@sigmashake.com","generated_at":1792151026712,"sub_processors":[{"id":"anthropic","name":"Anthropic","url":"https://anthropic.com","category":"ai","data_access":"customer-content","purpose":"AI inference: homepage chat, rule drafting, support-ticket triage and draft replies, inbound sales-email classification","data_categories":["chat and rule-drafting prompts","support-ticket subject and message text","sales-inquiry sender name, email address, subject and message text"],"location":"USA"},{"id":"cerebras","name":"Cerebras","url":"https://cerebras.ai","category":"ai","data_access":"customer-content","purpose":"AI inference for advisory rule drafting (default model provider)","data_categories":["rule-drafting prompts (secret-shaped strings are redacted before sending)"],"location":"USA — DPA and transfer assessment pending"},{"id":"cloudflare","name":"Cloudflare","url":"https://cloudflare.com","category":"infra","data_access":"root","purpose":"Infrastructure: compute, storage (D1, R2, KV), CDN, WAF, DNS, inbound email routing, Workers AI","data_categories":["all customer content and account data hosted on the service","visitor IP address and request metadata"],"location":"USA (SCCs apply for EEA data)"},{"id":"github","name":"GitHub (Microsoft)","url":"https://github.com","category":"devtools","data_access":"secrets","purpose":"Source hosting and GitHub App / OAuth sign-in for staff and customers","data_categories":["source code and infrastructure configuration","GitHub account identifiers"],"location":"USA"},{"id":"google","name":"Google","url":"https://policies.google.com","category":"monitoring","data_access":"metadata","purpose":"Analytics (GA4 in Consent Mode v2, consent denied by default; no consent banner exists, so GA4 sets no cookies and sends cookieless pings only) and Google Fonts","data_categories":["page views and product-funnel events","visitor IP address and user agent"],"location":"USA — DPA and transfer assessment pending"},{"id":"resend","name":"Resend","url":"https://resend.com","category":"communication","data_access":"metadata","purpose":"Transactional outbound email","data_categories":["recipient email address","message subject and body","message headers"],"location":"USA"},{"id":"stripe","name":"Stripe","url":"https://stripe.com","category":"payments","data_access":"customer-content","purpose":"Payment processing and subscription billing","data_categories":["billing contact details","payment-card data (entered in Stripe Checkout only; never reaches SigmaShake)","subscription metadata"],"location":"USA"},{"id":"jsdelivr","name":"jsDelivr","url":"https://www.jsdelivr.com","category":"infra","data_access":"metadata","purpose":"Public CDN for third-party browser libraries (asciinema player, Swagger UI) on hub, build and vcs pages","data_categories":["visitor IP address, user agent and referrer"],"location":"Global CDN — DPA and transfer assessment pending"}]}