Legal

Subprocessors

Last updated: March 30, 2026

Overview

A subprocessor is a third-party company or individual that Product Signal engages to process personal data on your behalf as part of delivering the Service. We maintain this page to be transparent about who handles your data and for what purpose.

We only use subprocessors that provide sufficient guarantees regarding their data protection practices, as required by applicable law (including GDPR Article 28).

Current Subprocessors

Bunny

CDN and DNS

Europe

GitHub

Code hosting and repository management

United States

Linear

Project management and collaboration

United States

OpenAI

AI processing

United States

Railway

Application hosting, database storage, and content delivery

United States

Integrations

These third-party platforms are connected at your direction to sync data into Product Signal. They act as independent data controllers for data stored in their own systems.

Leexi

Call recording and transcript data source

Europe

Productboard

Customer feedback data source

United States

Updates to This List

We review our subprocessors regularly. When we add or replace a subprocessor, we will update this page and notify customers by email at least 14 days before the change takes effect, giving you time to raise any objections.

If you have concerns about a specific subprocessor, contact us at privacy@productsignal.io.

Security Review

Before engaging any subprocessor, we assess their security practices, data processing terms, and compliance with applicable data protection law. All subprocessors are contractually bound to process data only on our documented instructions and to implement appropriate technical and organizational security measures.

Data Processing Agreement

If you require a Data Processing Agreement (DPA) for GDPR compliance, contact us at privacy@productsignal.io.