Stack Overflow Public Network Third Party Data Sub-processors
Effective November 12, 2025
As part of providing and supporting the Stack Overflow Public Network, we rely on certain vetted and authorized third-party sub-processors to process personal information on behalf of Stack, each of which are provided in the table below. This table applies to the Stack Overflow Public Network (“Stack Overflow” or the “Network”), as defined in the Stack Overflow Public Network Terms of Service.
This disclosure supplements the Stack Overflow Privacy Policy and provides more detailed information on the specific sub-processors that Stack uses to provide the Public Network.
The “Data Processed” definitions used in this disclosure are defined and explained in our Privacy Policy here.
Questions about Stack Overflow Public Network sub-processors, and other data privacy related questions, should be directed to privacy@stackoverflow.com.
AI Feature Sub-processors
| Name | Services Provided | Data Processed | Location | Trust & Security Assurance |
|---|---|---|---|---|
| Google Gemini | Provides AI Model for Public Network AI Feature | All Inputs are sent to Google Gemini for processing and return of Outputs, but Gemini does not retain or train on this data. No personal data is sent unless a user decides to input it, which is discouraged. | United States | Google Trust and Security |
| OpenAI | Provides AI Model for Public Network AI Feature | All Inputs are sent to OpenAI for processing and return of Outputs, but OpenAI does not retain or train on this data. No personal data is sent unless a user decides to input it, which is discouraged. | United States | OpenAI Trust Portal | Powered by SafeBase |
See Section 12 of the Public Network ToS for more information on AI Features.
Platform Infrastructure Sub-processors
| Name | Services Provided | Data Processed | Location | Trust & Security Assurance |
|---|---|---|---|---|
| Cloudflare, Inc. | Network platform connectivity, content delivery, management services, analytics, and security | Identity data, contact data, technical data, device and browser information | United States | Privacy & Data Protection | Cloudflare |
| Cribl, Inc. | Data infrastructure and security monitoring | Contact data, device and browser information | United States | Cribl.io Privacy Notice |
| Databricks, Inc. | Data storage and analytics | Identity data, contact data, technical data, device and browser information | United States | Databricks Trust: Ensuring Security, Privacy, & Compliance | Databricks |
| Datadog, Inc. | Data infrastructure and security monitoring | Identity data, contact data, device and browser information | United States | Privacy at Datadog |
| Elasticsearch, Inc. | Search functionality | Identity data | United States | Trust Center | Elastic |
| Google Cloud Platform (GCP) | Platform hosting and service provider | All platform data is hosted and backed up in GCP and MS Azure | United States | Google Cloud Trust Center |
| Microsoft Corporation | Platform hosting and service provider | All platform data is hosted and backed up in GCP and MS Azure | United States | Data protection and privacy - Microsoft Trust Center |
| Snowflake Inc. | Data storage and analytics | Identity data, contact data, technical data, device and browser information | United States | Snowflake Privacy Policy |
Platform Services Sub-processors
| Name | Services Provided | Data Processed | Location | Trust & Security Assurance |
|---|---|---|---|---|
| Adobe, Inc. (Marketo Engage) | Optional marketing communications | Contact data, marketing and sales information, device and browser information | United States | Privacy Management | Adobe | Marketo Engage |
| Atlassian Pty. Ltd. | Support ticket tracking and management | Contact data provided by user in support request | Australia | Privacy Policy | Atlassian |
| Braze, Inc. | Optional user engagement and announcement communications | Contact data, marketing and sales information | United States | Privacy Policy | Braze |
| Cinder Technologies, Inc. | Chat and content moderation | Contact data, profile information | United States | Cinder's Privacy Notice |
| Freshworks, Inc. | Support ticket tracking and management | Contact data provided by user in support request | United States | Privacy Notice Freshworks Inc. |
| Google Analytics 360 (GA360) | Web analytics, user site behavior and traffic management | Device and browser information, log and usage data, technical data | United States | Trust Center - Security and Compliance | Google Cloud |
| Google Tag Manager 360 (GTM360) | Web analytics, user site behavior and performance management | Device and browser information, log and usage data | United States | Trust Center - Security and Compliance | Google Cloud |
| IPQualityScore (IPQS) | User verification, security, and fraud prevention | Contact data, device and browser information | United States | IPQS User Privacy Policy Overview | IPQS |
| Monte Carlo Data, Inc. | Personal data security monitoring and alerts | Contact data, identity data | United States | Monte Carlo Privacy Policy |
| OneTrust, LLC | Cookie consent and user privacy rights management | Contact data, technical data, device and browser information, location data | United States | OneTrust Trust Center |
| OpaVote LLC | Moderator voting and elections management | Contact data, device and browser information | United States | OpaVote Privacy Policy |
| Qualtrics, LLC | Optional surveys and user feedback | Contact data, device and browser information | United States | Qualtrics Privacy Policy , Trust Center - Qualtrics |
| Rally HQ, Inc. | Optional user research engagement | Contact data, profile information | United States | Rally Privacy Policy |
| Rootly, Inc. | Security incident management | Data varies based on incident, can include: Contact data, device and browser information, technical data, and identity data, as needed to resolve security incidents. | United States | Rootly Trust Center |
| Twilio Inc. | Delivery of user emails | Contact data | United States | Trust Center | Twilio |
Ads Sub-processors
The following table lists the sub-processors used for Ads:
| Name | Services Provided | Data Processed | Location | Trust & Security Assurance |
|---|---|---|---|---|
| Google LLC (Google Ad Manager) | Integrated advertising management platform | Device and browser information, location data | United States | Privacy Policy – Privacy & Terms – Google |
| Longitude Ads, LLC | Programmatic advertising management | Device and browser information, location data | United States | Terms of Service / Longitude Ads |
For more information on how we collect and use personal data with regard to the ads on our site, and how to manage these preferences, please see our Cookie Policy.
Updates
We may amend or update this list from time to time as sub-processors change. When we do, we will inform you by publishing the update here. Please check back periodically for the current list of sub-processors authorized to process personal information on our behalf.