Sub-processors
Version 2026-10-26, effective 26 October 2026
These companies ("sub-processors") process personal information for us, under written contracts that limit them to providing their service and require them to protect it. This is the current list. It is part of our Privacy Policy (section 9).
| Provider | What they do for Akagi | Information involved | Where |
|---|---|---|---|
| Google Cloud (Google LLC and affiliates): Cloud Run, Cloud SQL, Cloud Storage, Cloud Tasks, Pub/Sub, Cloud Scheduler, Secret Manager, Cloud KMS, Cloud Logging, Cloud Monitoring, Cloud Load Balancing | Hosts and runs Akagi: the application, database, backups, file storage, background jobs, keys and logs | All information in section 4 | Sydney, Australia; database backups in Melbourne, Australia (Google's administrative audit logs: global, section 10) |
| Google Cloud: Identity Platform | Sign-in: sends sign-in emails, confirms Google and Microsoft sign-ins | Email address, name, sign-in identifiers | Google's global infrastructure |
| Google Cloud: Vertex AI (Gemini) | Writes handoff notes (section 7.1) | Session activity only, never file contents | Google's global infrastructure |
| Postmark (ActiveCampaign, LLC) | Delivers invitation, joining-notice and FYI emails | Recipient email address and name, the email's contents (workspace and project names, people's names, update titles) | United States |
| PostHog (PostHog, Inc.), US Cloud | Product analytics for the web app, and website analytics for akagi.work, and nothing else: no session recording | Pseudonymous identifier, feature use, pages viewed, browser and device type, approximate location; for the website, IP address (used to derive location, not stored) | United States |
| Google: Firebase Hosting | Serves the akagi.work website | IP address and browser details of visitors | Google's global content delivery network |
| Microsoft | Confirms Microsoft sign-ins, when you choose to use one | Email address, name, Microsoft account identifier | Microsoft's global infrastructure |
When you choose to sign in with Google or Microsoft, that company also learns that you signed in to Akagi, under its own privacy policy.
Changes to this list
We tell every workspace Owner by email at least 30 days before we add a sub-processor or replace one, and we keep a record of who was told and when. The email goes to the address on each Owner's Akagi account. If you object to a change, write to privacy@akagi.work within that time and we will talk it through with you.
Questions about this list: privacy@akagi.work.