Companies / sourcegraph.com
sourcegraph.com tech stack
sourcegraph.com declares 9 subprocessors, including AI providers Fireworks AI, OpenAI.
Declared subprocessors
Subprocessor list From the company's own list. Read the source.
| Subprocessor | Purpose |
|---|---|
| Amp | Processes error data, which can include customer code and account identifiers, for troubleshooting purposes |
| Anthropic AI | Processes user queries and code snippets submitted to Sourcegraph AI Tools |
| Cloudflare | Processes customer request data such as IP addresses to optimize security and performance of Sourcegraph Cloud and Sourcegraph.com |
| Fireworks AI | Processes user queries and code snippets submitted to Sourcegraph AI Tools |
| Google (Cloud Provider) | Provides cloud hosting for Sourcegraph.com and Sourcegraph Cloud (Google Cloud Platform). Stores dashboard analytics for Sourcegraph.com and Sourcegraph Cloud (BigQuery) |
| Observe | Processes telemetry data (e.g. logs, metrics, traces) and operational log data, which may include limited personal data (e.g. usernames, emails, repository names, and code host URLs), to support service monitoring and performance analysis |
| OpenAI | Processes user queries and source code to generate embeddings that improve search functionality when using Sourcegraph AI tools and only when enabled by customer |
| Sentry | Processes error data, which can include email addresses and other personal data, for debugging purposes |
| Sparkpost | Processes account verification and other service-related emails |
Seen on the website
Website This shows what the site runs, not what data it shares.
| Technology | Signal we saw |
|---|---|
| Cloudflare | header: cf-ray: a546d6c90856d7a8-LAX |
| Google Tag Manager | script: 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f |
| Google Workspace | mx: aspmx2.googlemail.com. |
Certifications
| Standard | Status | What this means |
|---|---|---|
| ISO 27001 | Company's own statement | Stated by the company. We have not checked an accreditation registry. |
| SOC 2 | Company's own statement | SOC 2 has no public registry, so this cannot be verified from public data. |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. How we collect data.