Subprocessors
The third-party services we use to operate Morse.
Last updated: August 2026
Morse uses the third-party services below to operate the platform. Each one is bound by a written agreement limiting it to processing data on our instructions. We do not sell your data, and we do not send your telemetry to any service outside this list.
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Railway | Application hosting, managed PostgreSQL, managed Redis | All platform data — account records and telemetry | United States |
| Cloudflare | DNS, CDN, and R2 object storage for large trace payloads | Trace payloads above the inline size threshold; site traffic metadata | United States |
| Stripe | Payment processing and subscription billing | Billing contact and payment details (card data never reaches Morse) | United States |
| Resend | Transactional email delivery | Email address and message content for alerts and account notifications | United States |
| Anthropic | LLM inference for the Copilot and Anomaly Investigator features | Trace excerpts relevant to the question you ask, after PII redaction | United States |
| OpenAI | LLM inference for the Anomaly Investigator | Trace excerpts relevant to the investigation, after PII redaction | United States |
| PostHog | Product analytics for the Morse dashboard itself | Usage events for your Morse session — not your telemetry data | European Union |
| Sentry | Error monitoring for the Morse application | Stack traces and request metadata from Morse errors | United States |
| Better Stack | Uptime monitoring and the public status page | Endpoint availability only — no customer data | European Union |
AI Subprocessors
Anthropic and OpenAI receive data only when you use a feature that calls them — the Copilot and the Anomaly Investigator. They receive the trace excerpts relevant to your question, after PII redaction has been applied at ingestion. Both are contractually barred from training their models on data submitted through their APIs.
If you never use those features, no trace data leaves Morse infrastructure for an AI provider.
Changes to This List
We will update this page before a new subprocessor begins processing customer data, and notify account owners by email at least 30 days in advance. If you object to a new subprocessor, contact us and we will work with you on an alternative or, where none exists, allow you to terminate without penalty for the remainder of your paid term.
Contact
Questions about this list, or to request a Data Processing Agreement: [email protected].
See also our Privacy Policy, Security & Trust page, and Data Retention Policy.