Every vendor that
touches your data.
Webel uses a small number of vendors to run our products and websites. Each one is here, with what it processes and why. If it's not on this page, it doesn't have your data.
Last updated July 11, 2026Hosting & execution
Where the Services run and your data lives at rest.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services | Cloud hosting: databases, compute, storage, CDN, secrets management, logging | All Services data at rest and in transit through our infrastructure | United States (us-west-2) |
| E2B | Isolated micro-VM sandboxes in which agent build and test work executes | Repository contents, files, and commands for the duration of agent work; scoped secrets injected per-command, never stored at rest | United States |
Model inference & agent tools
The model providers behind our AI features, plus the search service our agents use. Our agreements with our model providers do not grant any right to use your content to train their models, and limit their processing to providing model services to us. If you bring your own provider key, calls made with it run under your own agreement with that provider.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic | Large-language-model inference for AI features | Conversation windows and workspace context needed to generate the responses you request | United States |
| Crusoe | Large-language-model inference for AI features (open-weight models) | Conversation windows and workspace context needed to generate the responses you request | United States |
| Meta | Large-language-model inference for AI features (Llama models) | Conversation windows and workspace context needed to generate the responses you request | United States |
| Brave Search | Web search performed by agents when you use agent search | Search query strings composed by the agent (may derive from conversation context) | United States |
Payments & communications
Billing, and the email and text messages that keep your account working.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe | Payment processing, subscription billing, hosted checkout | Billing contact details, subscription state, transaction amounts; card details are collected and held by Stripe, not Webel | United States |
| Resend | Transactional and product email delivery; delivery, bounce, and complaint events | Recipient email addresses, email subjects and bodies (including one-time sign-in links) | United States |
| SMTP relay for certain transactional mail | Recipient email addresses, email subjects and bodies (including one-time sign-in links) | United States | |
| Twilio | Text-message (SMS) delivery for notifications you enable | Recipient phone numbers and message content | United States |
Services you connect
These providers process data only when — and only because — you connect them, under your own relationship with each provider. They aren't subprocessors in the classic sense: you direct the data flow, and you can disconnect them in settings at any time.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| GitHub | Repository integration: clone and push, pull requests, CI status, review-comment ingestion — via a GitHub App with short-lived scoped tokens | Repository contents and metadata; work products pushed to your repositories | United States |
| Google (Gmail, Calendar, Drive — Grow) | Email, calendar, and document sync you authorize | The Google user data you authorize, under Google API Services User Data Policy Limited Use requirements | United States |
| Plaid · QuickBooks · Xero (Grow) | Accounting and banking data sync you authorize | Financial records you authorize | United States |