Sub-processors

Last updated: January 27, 2026

Overview

Gantum uses third-party sub-processors to provide our services. Sub-processors are service providers that process customer data on our behalf to enable Gantum's functionality. This page lists all sub-processors we use and the purpose of each.

We ensure all sub-processors maintain appropriate security and privacy standards. We enter into data processing agreements with our sub-processors that require them to protect customer data in accordance with applicable data protection laws.

List of Sub-processors

1. Amazon Web Services (AWS)

Purpose: Cloud hosting and infrastructure

Data Processed: All customer data, including account information, tickets, projects, and application data

Location: United States

Website: aws.amazon.com

2. GitHub

Purpose: Code repository and GitHub integration features

Data Processed: GitHub repository information, commit data, pull request data, and webhook data when customers enable GitHub integration

Location: United States

Website: github.com

3. Slack

Purpose: Slack workspace integration and notifications

Data Processed: Slack workspace information, channel data, user information, and ticket notification data when customers enable Slack integration

Location: United States

Website: slack.com

4. Stripe

Purpose: Payment processing and subscription management

Data Processed: Payment information, billing details, and subscription data

Location: United States

Website: stripe.com

5. AI Service Providers

Purpose: AI-powered features including ticket generation, sprint planning, time estimation, and insights

Data Processed: Customer prompts, ticket descriptions, project data, and AI-generated content

Providers: OpenAI (GPT-4, GPT-3.5-turbo), Anthropic (Claude), and other AI service providers

Location: United States

Note: We use API-based access to AI providers. Customer data is processed for AI features but is not used to train AI models. Data is not retained by AI providers beyond the API request/response cycle.

Updates to This List

We may add or remove sub-processors from time to time. When we add a new sub-processor, we will update this page and notify customers via email or through our service notifications. We will provide at least 30 days' notice before adding a new sub-processor that processes significant amounts of customer data.

If you have concerns about any sub-processor, please contact us at [email protected].

Data Processing Agreements

All sub-processors are required to enter into data processing agreements (DPAs) with Gantum that:

  • Require sub-processors to protect customer data in accordance with applicable data protection laws
  • Prohibit sub-processors from using customer data for any purpose other than providing services to Gantum
  • Require sub-processors to implement appropriate security measures
  • Require sub-processors to notify Gantum of any data breaches
  • Allow Gantum to audit sub-processor compliance with these requirements

Contact Us

If you have questions about our sub-processors or data processing practices, please contact us:

Email: [email protected]

Website: https://gantum.com