Subprocessors
Last updated: July 1, 2026
Descant, operated by Autonomy, engages the third-party subprocessors below to provide the service. The list identifies, by role, each subprocessor that may receive customer source code. We require each subprocessor to protect your data under terms no less protective than our Data Processing Agreement, and we will notify customers of changes so they may object.
The specific large-language-model providers that perform code authoring and independent review are identified by their role below. Their exact identities are disclosed in our confidential subprocessor list, available to customers on request, so that the disclosure stays accurate as the underlying providers evolve.
Current subprocessors
| Role | Vendor | Receives code | Purpose |
|---|---|---|---|
| Code-author LLM provider | Disclosed on request | Yes | Runs the autonomous planning and implementation agents over your connected repositories. |
| Independent code-review LLM provider | Disclosed on request | Yes | Performs the independent, distinct-vendor code review required before any change is proposed for merge. |
| Application hosting & compute | Amazon Web Services (AWS) | Yes | Hosts the product and runs the orchestration that coordinates each run against your code. |
| Source-code host (customer-connected) | GitHub | Yes | The repository host you connect; we access only the repositories you authorize, using your tenant's credentials. |
| Managed database | Amazon Web Services (AWS) | Yes | Stores durable run and account state, which can include repository identifiers and run artifacts. |
| Managed queue | Upstash Redis | No | Holds pipeline queue and job state for the runner. Receives job metadata, not source code. |
| Closed-beta signup | Resend | No | Receives the email address you submit through the closed-beta signup form and stores it on the invite list. Receives no source code. |
Changes to this list
We may add or replace subprocessors as the service evolves. When we do, we will update this page’s “Last updated” date and notify customers in advance where required, so you have the opportunity to object.
Contact us
Questions about our subprocessors? Email [email protected].