Subprocessors
Last updated: June 22, 2026
PlanetGraph uses subprocessors to host, secure, authenticate, email, and operate the service. We limit subprocessors to providers necessary to deliver PlanetGraph and maintain appropriate security and contractual controls with them.
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Google Cloud Platform | Cloud hosting, managed database, storage, networking, logging, backups, and infrastructure security. | Customer graph data, account metadata, operational metadata, logs, backups. | United States; primary production resources currently use us-central1. |
| Firebase / Google Identity Platform | Authentication and identity services. | Account identifiers, authentication metadata, basic profile data from sign-in providers. | United States / Google-managed infrastructure. |
| Google Cloud KMS | Key management for envelope encryption. | Cryptographic key metadata and key operations; not plaintext customer property values. | Google-managed infrastructure; production service resources currently use us-central1 where configured. |
| OpenAI | Embedding generation for customer-configured semantic search. | Only source text from properties the customer has configured as searchable and embedding-eligible. | OpenAI-managed infrastructure. |
| Mailgun | Transactional email delivery. | Email addresses and message metadata/content necessary to send service emails. | Mailgun-managed infrastructure. |
| Stripe | Payment processing for usage token purchases. | Billing contact information, payment metadata, transaction records, and payment details processed by Stripe. | Stripe-managed infrastructure. |
OpenAI Embeddings
PlanetGraph sends content to OpenAI only when that content is eligible for embedding generation. Customers control eligibility by configuring which properties are searchable. If a customer does not configure properties as searchable, customer property content is not sent to OpenAI for embedding generation.
Subprocessor Changes
PlanetGraph will provide notice of material subprocessor changes through this page or customer communication channels. Enterprise DPA terms may include additional notice or objection procedures.
Contact
Questions about subprocessors can be sent to legal@planetgraph.ai.