Legal
Sub-processors
Last updated: July 31, 2026
Running Mochi Deploy takes a handful of other companies. These are the ones that may handle information covered by our Privacy Policy, what each is for, and what it sees.
Who we use
Each provider below is bound by its own agreement with us, and may use what it receives only to provide its service to us.
| Provider | What it does | What it handles | Where |
|---|---|---|---|
| Clerk | Sign-in and account management | Your name, email address, and sign-in details | United States |
| DigitalOcean | Hosting and the managed database | Everything the service stores for your workspace | United States |
| Infisical | Key management | The keys that encrypt your credentials and stored configuration values, not that data itself | United States |
| Sentry | Error and performance monitoring | Diagnostic data about faults. Configured not to send personal information, and filtered before it leaves the service | United States |
| Resend | Sending the service's email | The recipient's email address and the contents of that message | United States |
Your Aprimo instances are not on this list
The Aprimo environments you connect are your systems, not ours. Mochi Deploy reaches them at your direction, using the credentials you provide, and Aprimo is your provider rather than one of ours.
AI you connect is not on this list either
If you turn on AI access, the assistant you connect and the model behind it are chosen by you. We don't provide them and they aren't acting for us, so they are not our sub-processors. What they do with what they read is governed by their own terms. Our Privacy Policy explains what turning that on means.
Changes
We may add or replace providers as the service develops. When we do, we'll update this page and the date at the top of it, so this page is always the current list.
Questions
Email [email protected].