| Provider | Role and data | Location / status |
|---|---|---|
| Scaleway SAS | Compute, network, disks, object storage, backups, and the hosted runner fleet: native source, changes, agent tasks, checkpoints, saved conversations, review evidence, collaboration records, operational logs, LFS, attachments, artefacts, caches, and runner execution. | French operator; one EU region for compute, storage and bare metal. Meets our core data residency requirements. |
| Scaleway SAS · Transactional Email | Recipient address and message required for magic links, OTP, email changes, and invitations. | French operator; email service hosted in the EU. Meets our data residency requirements. |
| Paddle | Authorised reseller and Merchant of Record: billing contact, purchase and transaction metadata, and payment instrument data entered at checkout. No repository contents. | Independent controller for billing data. Paddle’s privacy notice lists entities in the UK, Ireland, US and Canada and describes international transfers. Outside our core data residency commitment. |
| Nebius · Token Factory | Optional managed AI review, only after organisation opt-in: selected repository code, diffs and review context. Pillion supplies the inference account. | Separate from core hosting. No EU-only residency promise for public serverless inference. See Nebius’s terms and the configured endpoint before enabling. |
Paddle billing data
Paddle sells paid Pillion services as Merchant of Record under its buyer terms and handles billing data under its privacy notice. Its international payment processing is separate from the core source and product-data path.
Pillion’s core data residency commitment covers stored source, agent context, and collaboration data. We make no EU-only residency promise for Paddle billing data.
Agent harnesses and model processing
Customer-enabled harnesses and model providers receive data under the customer’s configuration and provider agreement. Installing a connector does not make that external processing part of Pillion’s core storage residency commitment. Optional managed review sends selected context to Nebius only after organisation opt-in.
Self-operated software
MinIO is an optional self-operated storage adapter and is not a third-party operator when selected.
Questions or objections: info@pillion.dev.