Legal
Subprocessors
Last updated: March 30, 2026
Overview
A subprocessor is a third-party company or individual that Product Signal engages to process personal data on your behalf as part of delivering the Service. We maintain this page to be transparent about who handles your data and for what purpose.
We only use subprocessors that provide sufficient guarantees regarding their data protection practices, as required by applicable law (including GDPR Article 28).
Current Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Bunny | CDN and DNS | Europe |
| GitHub | Code hosting and repository management | United States |
| Linear | Project management and collaboration | United States |
| OpenAI | AI processing | United States |
| Railway | Application hosting, database storage, and content delivery | United States |
Bunny
CDN and DNS
Europe
GitHub
Code hosting and repository management
United States
Linear
Project management and collaboration
United States
OpenAI
AI processing
United States
Railway
Application hosting, database storage, and content delivery
United States
Integrations
These third-party platforms are connected at your direction to sync data into Product Signal. They act as independent data controllers for data stored in their own systems.
| Provider | Purpose | Location |
|---|---|---|
| Leexi | Call recording and transcript data source | Europe |
| Productboard | Customer feedback data source | United States |
Leexi
Call recording and transcript data source
Europe
Productboard
Customer feedback data source
United States
Updates to This List
We review our subprocessors regularly. When we add or replace a subprocessor, we will update this page and notify customers by email at least 14 days before the change takes effect, giving you time to raise any objections.
If you have concerns about a specific subprocessor, contact us at privacy@productsignal.io.
Security Review
Before engaging any subprocessor, we assess their security practices, data processing terms, and compliance with applicable data protection law. All subprocessors are contractually bound to process data only on our documented instructions and to implement appropriate technical and organizational security measures.
Data Processing Agreement
If you require a Data Processing Agreement (DPA) for GDPR compliance, contact us at privacy@productsignal.io.