Subprocessors
Last updated: June 18, 2026
Robot Networks engages the third parties listed below to help operate the Boardwalk platform. Where a third party processes Customer Personal Data for Robot Networks, we require written confidentiality, security, and data-protection terms appropriate to the processing. This page is the canonical list incorporated by reference into Annex III of the Data Processing Addendum.
Current subprocessors
Amazon Web Services, Inc.
- Location of processing: United States.
- Purpose: primary cloud infrastructure, including compute (Fargate, Lambda), object storage (S3), content delivery (CloudFront), email delivery (SES), queues and scheduling (SQS, EventBridge), and secret storage and encryption (Secrets Manager, KMS).
- Customer Personal Data received: all categories of Customer Personal Data described in DPA Annex I.B.
PlanetScale, Inc.
- Location of processing: United States.
- Purpose: managed Postgres database holding control-plane records.
- Customer Personal Data received: account and organization records, workflow and run metadata, usage events, audit log entries, and identifiers.
Clerk, Inc.
- Location of processing: United States.
- Purpose: authentication and identity.
- Customer Personal Data received: email address, display name, and authentication metadata.
Stripe, Inc.
- Location of processing: United States.
- Purpose: payment processing and subscription billing.
- Customer Personal Data received: billing-contact information, organization name, payment-method data (handled directly by Stripe and not stored on Robot Networks servers), and amounts charged.
Vercel Inc.
- Location of processing: United States (with edge points of presence globally for static-asset and HTML delivery).
- Purpose: hosting the boardwalk.sh and app.boardwalk.sh frontends.
- Customer Personal Data received: request logs and IP address; authenticated session cookies in transit.
OpenRouter, Inc.
- Location of processing: United States.
- Purpose:routing inference requests for Boardwalk's managed inference lane.
- Customer Personal Data received: the prompts, tool inputs and outputs, and completions exchanged with language models during runs that use managed inference. OpenRouter may route those requests to the model provider selected for the call. Secret values are redacted before any model call. Not engaged for runs that use a model provider the Customer brings itself.
Tavily
- Location of processing: United States.
- Purpose: web-search provider for the
web_searchtool available to agents. - Customer Personal Data received:the search queries a workflow's agent issues, only when a workflow uses web search.
PostHog, Inc.
- Location of processing: United States.
- Purpose: product analytics — understanding how visitors and signed-in users navigate and use the Boardwalk marketing site and web app, to improve the product.
- Customer Personal Data received: online identifiers (a pseudonymous analytics identifier, and — for signed-in users — account and organization identifiers and email address), IP address, approximate location derived from IP address, device and browser metadata, and product-usage and page-interaction events. Set with consent where required; see our Cookie Policy.
When a Customer connects a model provider it brings itself (a bring-your-own-key provider), inference traffic for those calls goes directly from the run to the Customer's configured endpoint. That provider acts under the Customer's own arrangement and is not a Boardwalk subprocessor.
Managed-inference model providers can change as provider availability and routing options change. Customers that require a fixed approved model-provider or subprocessor list should use bring-your-own-key providers or an Order Form that identifies the approved providers for that account.
How we evaluate and engage subprocessors
Before engaging a subprocessor, we assess its security and privacy posture (relevant certifications such as SOC 2 or ISO 27001, public privacy commitments, breach history, and contract terms) and require written confidentiality, security, and data-protection obligations appropriate to the processing, including cross-border transfer mechanisms where applicable.
Notification of changes
We give at least 30 days' advance notice before adding or replacing a subprocessor that processes Customer Personal Data on behalf of organization customers. Notice is given by updating this page and, for customers subscribed to notifications, by email.
To subscribe to subprocessor change notifications, email privacy@boardwalk.shwith the subject "Sub-processor notifications" and the address you want to receive notices at.
Customers may object to a new subprocessor on data-protection grounds as set out in DPA Section 6.
Change log
- 2026-06-18: editorial review of this page; no change to the subprocessor list.
- 2026-06-17: added PostHog, Inc. (product analytics).
- 2026-06-17: initial publication of the Boardwalk subprocessor list.
Contact
Questions: privacy@boardwalk.sh.