Subprocessors
Last updated: May 23, 2026
Version: 2026-05-23
A subprocessor is a third-party vendor that processes personal data on our behalf to provide the Service. We use a small set of subprocessors and try to keep the list short. We will update this page when we add or remove a subprocessor and, where contractually required, notify customers in advance.
Current subprocessors
| Subprocessor | What they do | Data they may process | Notes |
|---|---|---|---|
| DigitalOcean | Application runtime, managed database (including vector search), background job processing, and object storage for file uploads | All categories described in the Privacy Policy, including uploaded file bytes and related storage metadata | Processing and storage in the United States. Database backups and object storage are in the same country. |
| OpenAI | Generates document and search-query embeddings, and powers the in-product Skill AI assistant when you use it | Text chunks from your User Content; search queries; Skill AI messages and current skill form fields | Knotr uses OpenAI’s standard API only, where OpenAI’s API data-usage policy states inputs and outputs are not used to train OpenAI’s models. Skills exposed via MCP are run by your connected AI client, not by Knotr calling OpenAI on your behalf. |
| Stripe | Payments, subscriptions, and the customer billing portal | Billing email, address, payment method metadata, Stripe customer/subscription IDs, invoice history | Card data is handled directly by Stripe; full card numbers do not hit Knotr’s servers. |
| Mailgun | Transactional email (account, billing, invitations); mailing lists for operational notices and optional product updates (with consent) | Recipient email address, message content; list membership metadata when enabled | Operational list: all registered customers. Product/marketing segments require opt-in. |
| Scout APM | Application performance monitoring | Request paths, timings, error stack traces; we configure instrumentation to avoid sending raw User Content |
Not subprocessors
When you connect a third-party MCP host, AI assistant, IDE, or other client to your Knotr account using an API key, OAuth, or MCP credentials, that third party processes your data under its own privacy policy. It is not a Knotr subprocessor. You can revoke any client at any time from your account settings.
Changes
When we add or remove a subprocessor, we will refresh the Last updated date above and update our published legal version if the change is material. Customers who have signed our Data Processing Agreement and require advance notice should subscribe to subprocessor updates as described there.
Adapted from the Basecamp open-source policies under the Creative Commons Attribution 4.0 license. Modifications and Knotr-specific sections are © Knotr AI, LLC.