# Runtrace Subprocessors

## Current providers
### Hetzner Online GmbH
Purpose: cloud infrastructure and network hosting for the Runtrace application, identity service, and database.
Data: account, device, software inventory, vulnerability, workflow, report, audit, support, and session metadata required to operate the service.
Processing region: European Union.

### Revolut group merchant-services entity
Purpose: payment processing, subscription management, billing status, and payment webhooks for Business subscriptions.
Data: billing contact, customer and subscription identifiers, plan, amount, currency, payment status, and transaction references. Payment-card details are processed by Revolut and are not stored by Runtrace.

## Public security intelligence services
The Runtrace service queries OSV.dev with package ecosystem, package name, and installed version to retrieve public advisories. For returned CVE identifiers, it retrieves CISA's public Known Exploited Vulnerabilities catalog and queries FIRST's public EPSS API. These requests do not include Runtrace account, organization, device, user, file-path, or secret identifiers. Results are cached by exact package identity so enrolled Macs do not repeat the same public lookup.

## Runtrace-operated components
The application, PostgreSQL database, Keycloak identity service, OpenPanel website-analytics service, and Nginx reverse proxy are software components operated by Runtrace on hosted infrastructure. They are not separate third-party subprocessors.

## Optional integrations
Email and Slack report delivery are disabled unless configured for a deployment. When an Enterprise customer requests an additional provider, the provider and processing scope will be documented before customer data is sent.

## Changes to this list
Runtrace will update this page before a material new subprocessor begins processing customer data where reasonably practicable. Customers may raise a reasonable data-protection objection through their Runtrace contact.