Sub-processors

Effective Date: August 16, 2026

Intercept engages the following sub-processors to deliver the platform. Each sub-processor is bound by contractual obligations equivalent to those set out in our Data Processing Addendum.

Sub-processor	Purpose	Region
Amazon Web Services (AWS)	Compute, storage, database, and managed Kubernetes hosting for the Intercept platform	United States (us-east-1)
GitHub, Inc.	OAuth authentication, repository access, and GitHub App integration	United States
Anthropic, PBCOptional	AI-powered code analysis (optional, opt-in only or BYO-LLM)	United States
OpenAI, L.L.C.Optional	AI-powered code analysis (optional, opt-in only or BYO-LLM)	United States
Amazon Simple Email Service (SES)	Transactional email delivery (verification emails, alerts, notifications)	United States (us-east-1)
Stripe, Inc.	Payment processing and subscription billing for paid plans. Card details are entered directly with Stripe and are never received or stored by Intercept.	United States

Change Notifications

We will notify customers of any addition or replacement of a sub-processor at least 30 days in advance via email and via this page. Customers may object to a new sub-processor on reasonable grounds within the notice period.

Change Log

May 6, 2026Initial publication of sub-processor list.
August 16, 2026Added Stripe, Inc. Stripe has processed payments for paid plans since general availability on July 24, 2026 and was omitted from this list in error. This entry corrects that omission; it is not the introduction of a new sub-processor, so the 30-day notice period above does not apply.

Contact

Questions about our sub-processors? Email privacy@hijacksecurity.com.