subprocessors
last updated: April 2026
steerdev is operated by Pento Group LLC, Delaware, United States, and uses a small set of third-party subprocessors to deliver the Service. each one is bound by a written data processing agreement with confidentiality, security, and zero-training obligations at least as protective as those in our privacy policy.
Amazon Web Services
- purpose
- cloud hosting, model inference via Amazon Bedrock (including routing to foundation models such as Anthropic Claude), managed training (Amazon SageMaker), object storage (S3), key management (KMS)
- data processed
- account data, customer code, derived embeddings, prompts and completions, operational logs
- region
- United States (us-east-1)
- legal basis
- AWS Enterprise Agreement and DPA; EU Standard Contractual Clauses and UK IDTA for personal data originating in the EEA, UK, or Switzerland; Bedrock zero-retention and zero-training terms (customer prompts and completions are not used to train foundation models and are not shared with model providers)
Clerk
- purpose
- user authentication, session management, SSO and SAML
- data processed
- account metadata, email, session tokens
- region
- United States
- legal basis
- Clerk DPA with EU Standard Contractual Clauses and UK IDTA for EEA, UK, and Swiss personal data
PostHog
- purpose
- product analytics and feature usage telemetry
- data processed
- anonymized usage events, feature interactions, scrubbed IP addresses
- region
- United States
- legal basis
- PostHog DPA with EU Standard Contractual Clauses and UK IDTA; server-side PII scrubbing before ingress
Sentry
- purpose
- error tracking and crash reporting
- data processed
- stack traces and error metadata with secrets and PII stripped before ingress
- region
- United States
- legal basis
- Sentry DPA with EU Standard Contractual Clauses and UK IDTA; server-side secret and PII redaction middleware
change notifications
we provide at least 30 days' advance notice before adding a new subprocessor that will process Customer Data. to subscribe to notifications, or to object to a new subprocessor, write to privacy@steerdev.com.
international transfers
Pento Group LLC and the subprocessors listed above are located in the United States. for personal data transferred from the European Economic Area, the United Kingdom, Switzerland, or Brazil, we rely on the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum where applicable) together with the supplementary technical measures described in our privacy policy and at /privacy/trust.