Subprocessors
Last updated 19 October 2026
This text is a draft under legal review and is not yet in force. It describes how we intend to work at launch.
Orchec uses the providers below to run the service. Each is bound by a data processing agreement. We give 30 days’ notice before adding one; email privacy@orchec.com to be told by email.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hetzner | Hosting for the Orchec control plane, databases and metrics and log stores | Customer Data, account data | Germany and Finland |
| Cloudflare | DNS, network protection and object storage | Request metadata, stored artefacts | Global |
| Backblaze | Encrypted backups of the Orchec control plane | Encrypted backups | United States and EU |
| AWS (KMS) | Key management for envelope encryption of secrets | Encryption keys only, never plain secrets | United States and EU |
| Stripe | Payments, subscriptions, invoices and tax | Billing contact and payment data | United States |
| Vercel | Hosting for orchec.com and its cookieless analytics | Website visits, waitlist and demo request forms | Global |
| Resend | Sending email: invites, notifications and waitlist confirmations | Name and email address, message content | United States |
| Anthropic | AI copilot model provider | The parts of a request the AI needs, with secrets removed | United States |
| PagerDuty | On-call alerting for the Orchec team | Incident metadata | United States |
| Better Stack | Uptime monitoring and the Orchec status page | Monitor results, status subscriber emails | EU |
Counsel and the operations lead to confirm regions before launch.