Tetrate Subprocessors
Last updated: 10 November 2026
This page lists the third parties (“Subprocessors”) that Tetrate engages to Process Personal Data on behalf of its customers. It forms part of Tetrate’s Data Processing Agreement and serves as Annex III to the Standard Contractual Clauses incorporated in it.
This page covers only Personal Data that Tetrate Processes as a Processor for its customers. For personal data Tetrate controls, such as website visitors, marketing contacts and sales relationships, see the Privacy Policy.
Subprocessors
| Subprocessor | Purpose | Personal Data | Location | Applies to |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure for Tetrate-hosted deployments | Account data and Service data | The region the customer selects (default: United States) | Tetrate-hosted deployments on AWS |
| Google LLC (Google Cloud) | Cloud infrastructure for Tetrate-hosted deployments | Account data and Service data | The region the customer selects (default: United States) | Tetrate-hosted deployments on Google Cloud |
| Atlassian Pty Ltd (Jira) | Support ticketing | Support data: any Personal Data in logs, configurations, diagnostics and other files attached to support requests | Global (Atlassian data centers; no fixed data residency) | All customers who attach files to support requests |
| OpenAI, L.L.C. | AI model used by Tetrate’s support tools to summarize support tickets and draft responses | Personal Data in support ticket content, including any Support data copied into tickets | United States | All customers who file support requests |
| Anthropic, PBC | AI tools used by Tetrate support staff to analyze support requests | Support data that Tetrate support staff analyze with these tools | United States | All customers who attach files to support requests |
The data categories are those defined in Annex 1 of the Data Processing Agreement. The contact details of people who file support requests, and the correspondence on those requests, are covered by the Privacy Policy, because Tetrate is their controller.
Which Subprocessors apply to you
Tetrate-hosted deployments. Tetrate runs the components it hosts for you, whether control plane, data plane or both, on either AWS or Google Cloud, in the region you choose. Regions are currently available in the United States (the default), the European Union and Canada. Your Data is stored in that region. Only the cloud provider hosting your deployment is your Subprocessor. This includes Tetrate’s security monitoring, which runs inside your deployment’s management plane, in the same region. In hybrid deployments, components you operate keep their data in your own environment.
Self-managed deployments. You run Tetrate software in your own environment, so Tetrate does not host your data. The only Subprocessor that applies is Atlassian, and only when you attach files containing Personal Data to support requests.
Access by Tetrate Personnel
Tetrate employees and contractors may access customer data remotely for support, operations and security, under confidentiality obligations and the access controls in the Data Processing Agreement. Tetrate Personnel are located in the United States, Canada, the United Kingdom, Spain, India, Indonesia and Australia. Where this access involves a restricted transfer, the transfer mechanisms in Exhibit 2 of the Data Processing Agreement apply. Where a Tetrate subsidiary employs staff who access customer data, that subsidiary is a Subprocessor and is listed above.
AI model providers
Where you supply the credentials for an AI model provider, Tetrate sends prompts to that provider on your behalf. The provider acts for you, under your own agreement with it, and is not a Tetrate Subprocessor.
Where Tetrate supplies the model provider account, for example where model usage is billed through Tetrate, the provider is a Tetrate Subprocessor and is added to this list, with notice under the Data Processing Agreement, before it processes your data.
Changes to this list
Tetrate will give at least 30 days’ notice before a new Subprocessor begins Processing Personal Data. Notice is given by updating this page and emailing everyone subscribed to updates and each customer’s contact for notices. Under the Data Processing Agreement, you can object to a new Subprocessor within 30 days of notice.
To subscribe to updates, email dpo@tetrate.io.
