Legal
Subprocessors
Effective date: May 31, 2026. Last updated: June 2, 2026.
Overview
This page lists third-party providers that Black Diamond Labs Inc. uses to provide, secure, operate, or support z-gateway.
Providers are grouped as core subprocessors, payment processors, customer-connected integrations, and conditional providers. A provider may only receive information when the related product feature is used or enabled.
Provider List
| Provider | Category | Purpose | Data processed | Status / notes |
|---|---|---|---|---|
| Vercel | Core infrastructure subprocessor | Hosting, deployment, edge/network services, and performance or analytics services if enabled. | Application traffic, logs, and technical metadata. | Used to host and deliver the Service. |
| Neon | Core infrastructure subprocessor | Managed PostgreSQL database for z-gateway application data. | Account and workspace metadata, configuration, runtime logs, audit metadata, and related Service data depending on product use. | Application database provider. |
| Clerk | Authentication subprocessor | Authentication, sessions, identity management, and sign-in state. | Account identifiers, email address, profile details, and authentication/session metadata. | Used for user login and session management. |
| Stripe | Payment processor | Billing, subscriptions, invoices, customer portal operations, and payment processing. | Billing contact information, subscription metadata, invoice metadata, and payment metadata. | z-gateway does not store full payment card numbers. |
| GitHub | Customer-connected integration | GitHub App installation and repository or workflow actions when connected by a customer. | GitHub installation metadata, repository metadata, and requested action data. | Only applies when a customer connects GitHub. |
| PostHog | Conditional analytics provider | Product analytics if configured or enabled. | Product usage events and technical metadata. | Only active if configured in production. |
| Functional Software, Inc. d/b/a Sentry | Application diagnostics provider | Error tracking, crash reporting, application monitoring, debugging, diagnostics, and performance/reliability monitoring. | Diagnostic data, error events, stack traces, request metadata, request URLs/query strings, browser/device/runtime information, IP address where enabled/configured, console breadcrumbs, and account/user identifiers where configured. | United States. Used to operate, secure, debug, monitor, and improve z-gateway. |
Customer-Connected Services
Customers control whether they connect GitHub, database providers, or other supported systems to z-gateway. Those services have their own terms and privacy policies. z-gateway only governs activity routed through the Service or supported connectors.
Changes and Contact
We may update this page as our providers change. For questions about subprocessors, privacy, or provider notices, contact privacy@z-gateway.com.
Website: https://z-gateway.com