Subprocessors
Last updated July 24, 2026
Workado, LLC uses the current providers below to operate CodeValuation.com and pre-discloses the conditional Cloudflare R2 recovery use before that independent-backup control is enabled. We limit each provider to the data and purpose needed for its service and review material provider changes through our vendor-management process.
| Provider | Purpose | Primary processing location |
|---|---|---|
| GitHub | Authentication, repository authorization, public metadata, and authorized repository access | United States and provider-operated regions |
| Supabase | Authentication, PostgreSQL database, server functions, and permitted derived-data storage | Primary project in AWS U.S. West |
| Railway | Public web, portal, admin, and isolated managed-scan compute | Primary services in U.S. West |
| Cloudflare | DNS, edge security, and independently encrypted database/object recovery backups when the R2 control is enabled | Cloudflare global network and selected R2 location |
| Stripe | Web billing, tax, fraud prevention, and entitlement events | Provider-operated regions |
| Apple | iOS distribution, in-app purchases, and entitlement events | Provider-operated regions |
| Android distribution, in-app purchases, and optional consent-based website analytics | Provider-operated regions | |
| Twilio SendGrid | Transactional and requested marketing email delivery and event reporting | Provider-operated regions |
| OpenRouter | Bounded AI assistance using allowlisted report facts; no repository archive or source text | Provider-operated regions |
| X Corp. | Operator-initiated search of recent public repository conversations | Provider-operated regions |
Provider changes
We assess security, privacy, confidentiality, availability, data-location, deletion, and incident-notification considerations before adding a material provider. We will update this page before or promptly after a material change and provide additional notice when a contract or applicable law requires it.
Questions or objections
Contact help@codevaluation.com with a security or subprocessor question, or justin@codevaluation.com with a privacy request.