Subprocessors
The infrastructure providers Passport relies on to run the hosted service. We keep this short and current on purpose.
| Provider | What it does | Location |
|---|---|---|
| Railway | Application hosting and the managed Postgres database that stores your workspace | United States |
| Cloudflare | DNS and CDN/proxy in front of the hosted app | United States (global edge) |
| Resend | Transactional email: sign-in links, invites, and request notifications | United States (us-east-1) |
| Stripe | Payments and subscription billing (we never see card numbers) | United States |
| GitHub | Desktop app release distribution (signed update feed) | United States |
| Sentry | Error tracking, performance traces, and operational logs/metrics; browser replay is disabled | United States |
Resend and Stripe only process data on deployments where an admin has turned on email or billing. Sentry receives privacy-filtered operational diagnostics; collection of credentials, request/response bodies, and MCP content is disabled, and names or emails are not deliberately attached. Your workspace data itself lives with Railway; the others see only what their function needs.
See the public standard DPA and SCC terms, Privacy, and Security.