Skip to content
Stackwatch, go to homepage

Data processing

Data processing agreement (DPA). Before we read your code.

A DPA under Art. 28 GDPR is required as soon as a provider processes personal data on your behalf. Stackwatch reads excerpts from your repos and stores names and email addresses of your team. That is why we sign a DPA with every customer before we start.

What the DPA covers

  • Analysis of selected repo contents (manifests, configs, code excerpts) for stack detection and fix suggestions
  • Storage of derived data: stack map, alerts, comments, audit log
  • Data of your team: name, email, GitHub login, notifications
  • Technical and organizational measures, hosting in Germany
  • Subprocessors, including Anthropic for the AI analysis (no training on your data)

How to get the DPA

Send us a short note on which organization you use Stackwatch for. You receive the DPA for signature, the current list of subprocessors is part of the agreement.

Request the DPA