Sub-processor List

Version 1.0 · Effective: November 2, 2026

Download the PDF

This list identifies the third parties that process member personal data in connection with the Library of Code Platform (LOCID, Cloud Services (CSG2), Library of Code Google Workspace accounts, and other services offered through your LOCID), as referenced in Section 6 of the Privacy Policy. We do not sell personal data or share it with third parties for their own marketing, and we do not use third-party analytics or advertising tools on the Platform. We update this list when providers change; material changes are communicated as described in the Privacy Policy.

Library of Code administers the Platform itself — identity and sign-on (LOCID), the hosting platform (compute, storage, networking, remote access, public ingress), account records, and activity logs. No external party administers the Platform. The providers below store or process data on our behalf and may access it only as needed to provide their services or as required by law.

Sub-processors (process data on our behalf)

Sub-processor Purpose Member data processed Location
Microsoft Corporation (Microsoft Azure) Cloud infrastructure hosting Library of Code systems Hosts infrastructure we administer United States
Hetzner Online GmbH Data-center hosting of Library of Code systems Hosts infrastructure we administer Helsinki, Finland (EU/EEA)
Cloudflare, Inc. Object storage for platform logs, records, and platform backups; authoritative DNS for Library of Code domains (including member hostnames under our domains) Activity and security logs (including session records), platform and account records, backups of our own platform records (not member environments); DNS query metadata for our domains United States
Didit Identity Spain, S.L. (Didit) Identity verification, only when we require it (higher-risk capabilities such as VPN tunnel access, flagged accounts, or case by case) Image of government-issued ID; selfie / liveness video (biometric, with your explicit consent); details read from the ID. We receive only pass/fail, verified name and date of birth, and a reference number Spain (EU/EEA)
Atlassian Pty Ltd (Jira Service Management, Statuspage) Help desk / support ticketing (our help desk at loc.sh/cs-help) and our public status page Name, email address, chat-platform identity if provided, and the contents of your support tickets and attachments; if you subscribe to status updates, your email address or phone number United States (provider may also process data in other countries under its terms)
Microsoft Corporation (Microsoft 365) Email and productivity tools used for member correspondence, including executive@libraryofcode.org Email address, name, and the contents of your correspondence with us United States (provider may also process data in other countries under its terms)
Anthropic, PBC (Claude) AI assistance for staff operations: summarizing monitoring alerts and helping staff with support and operational tasks Excerpts of platform and security logs (which may include your username, IP address, and session activity) and any member details staff include in a request. Not used to train Anthropic’s models under our terms with Anthropic United States
Google LLC (Google Workspace) Library of Code Google Workspace accounts issued to members, administered by Library of Code Name, email address, account data, and the contents of the account (mail, files, calendar, and other Workspace data) for members issued such an account United States (provider may also process data in other countries under its terms)

Independent third-party platform (processes data under its own privacy policy, not on our behalf)

Platform Purpose Member data it sees Location
Discord Inc. Chat platform through which the Platform is accessed and administered; you have your own account and relationship with Discord Chat-platform user ID and username; account and resource details shown to you or staff in chat; messages and support correspondence with our staff; hosted content only if you share it in chat United States (provider may also process data in other countries under its terms)

Notes

  • Our primary identity provider (Library of Code’s single sign-on) is operated by Library of Code and is therefore not a sub-processor.
  • Automated emails (for example, account notifications) are sent from email infrastructure operated by Library of Code, not through a third-party sending service.

Questions about this list: it@libraryofcode.org.


Library of Code, Inc.
30 N Gould St, Ste 21543, Sheridan, WY 82801, USA
Email: executive@libraryofcode.org