Effective: November 6, 2026
These are the companies that process personal data for Obelisk, The Obelisk App Inc., to run the service. Each one gets only the data it needs for its job, under a written contract that holds it to data protection terms at least as strict as our data processing addendum.
Subprocessors
| Company | What it does for Obelisk | Data it processes | Where |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, database, file storage, backups, logs and sending email (Amazon SES) | Everything stored in Obelisk, including tracking data, uploads, chat and email recipients and content | United States (us-east-1, Northern Virginia) |
| Anthropic, PBC | AI models for chat, agents, audit checks, summaries, suggested fixes and the business brain | Text Obelisk sends for each task: page text and audit findings, chat messages, uploaded documents, brain facts, and totals and search queries from Search Console, Google Analytics and tracking | United States |
| DeepInfra, Inc. | Turns text into search vectors so the business brain can find what's relevant | Text from brain facts, uploaded documents and searches | United States |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | IDs, counts, categories, timings, browser and device type. No email addresses, page content or tokens | European Union (Germany) |
| Stripe, Inc. | Payments, subscriptions, invoices, the billing portal and fraud screening (Stripe Radar) | Billing contact, billing address, payment and device details (collected by Stripe directly) and your organization ID | United States |
| Cloudflare, Inc. | Turnstile bot checks on sign-in and forms | IP address, browser signals and the page the check runs on | Global network |
Service providers that receive no customer personal data
| Company | What it does for Obelisk | What it receives | Where |
|---|---|---|---|
| DataForSEO OÜ | Keyword, ranking, backlink, competitor and AI-mention data | Domains, competitor domains, keywords, locations and languages | Estonia |
| Google LLC | Page speed measurements (PageSpeed Insights and the Chrome UX Report) | Public page addresses | United States |
| GitHub, Inc. | Hosts our public status page (GitHub Pages) | Requests from people who open the status page; no customer data | United States |
Services you connect
When you connect one of these services, Obelisk reads from it or acts in it on your instructions, using the permissions you grant. They aren't our subprocessors: you choose them, you have your own agreement with them, and their terms govern your account there.
- Google (sign-in, Search Console and Google Analytics)
- WordPress (your own site)
- GitHub
- Slack
- Linear
- Jira (Atlassian)
Changes to this list
We give customers at least 30 days' notice before a new subprocessor starts processing their personal data, by email to account owners and by updating this page. Customers who object on reasonable data protection grounds can tell us at privacy@theobelisk.app within that period, as our data processing addendum explains. If a subprocessor must be replaced urgently to keep Obelisk secure or running, we tell you as soon as we can.
Questions: privacy@theobelisk.app.