Subprocessors

Anthropic, OpenAI, Google, OpenRouter, and DeepInfra receive data only when you use AI features that Orgo runs for you. That can include your prompts and screenshots of your computers. DeepInfra runs the open models you pick (marked ZDR) and does not keep the content of a request once it has answered it.

If you bring your own provider API key, you are talking to that provider directly under your own agreement with them, and they are not acting as our subprocessor for that traffic.

If you turn on agent monitoring with Latitude (latitude.so), your agents send traces to your own Latitude account: which agent, tool, and model each step used, how long it took, token counts, and whether it succeeded. Traces do not include your prompts, responses, tool inputs or outputs, screen content, or memory contents. If you ask us to create the Latitude account for you, we send Latitude your name, your email, and the organization name you choose. If you connect an account you already have, we send none of these. Latitude handles this data under your own agreement with them.

You can sign in with Google, GitHub, or Microsoft. If you do, that company confirms your identity to us and shares your name, email, and profile picture. We list them here for completeness. They act as your identity provider rather than as our subprocessor.

Orgo builds and operates its own infrastructure in the United States. Your computers, our databases, and our object storage all run there. Subprocessors may process data in other regions under their own terms.

We update this page when we add or remove a subprocessor. Customers with a Data Processing Agreement can request advance notice of new subprocessors by writing to privacy@orgo.ai.

Questions about this list, or a request for a Data Processing Agreement: privacy@orgo.ai.