Overview
SlashCommand uses the following service providers to operate the product.
Each provider is listed with its primary purpose and relevant data handling notes. This list covers primary infrastructure and service providers. We do not sell or commercially transfer customer data to any party. Repository access, the GitHub App integration model, and data boundaries are documented on the Trust page.
Current list
Three primary service providers.
Google Cloud Platform
Primary infrastructure — compute, database, secret management, and scheduled operations.
EU-based build and deployment infrastructure. Primary data residency.
Resend
Transactional email delivery — account verification and authentication messages.
Processes account email addresses for delivery of auth-related messages only.
PostHog
Product analytics — usage and session events for authenticated users.
No personally identifiable information transmitted. Opaque user identifiers only.
Scope and changes
This list is intentionally minimal and reflects confirmed primary providers only. It is not a guarantee of completeness. SlashCommand will update this page when its provider list changes.
GitHub is the VCS integration partner — repository access flows from GitHub to SlashCommand via App tokens, not to GitHub as a data recipient. The GitHub App model and access scope are documented on the Trust page.
A formal subprocessor register and data processing agreement process is not yet formalized. These are in scope for future trust artifact development.
Questions
Questions about our service providers or data processing arrangements can be directed to our security and trust address.
Additional subprocessor detail can be provided during procurement evaluation on request.
Security & trust inquiries
security@slashcommand.devFor vendor review, security questions, and trust inquiries.