Skip to main content

Third-Party Services

We use the following third-party services to operate Tero:
ServicePurposeData ProcessedLocationTrust Center
Google Cloud PlatformInfrastructure hostingControl plane data, backupsUnited StatesGCP Trust Center
AnthropicAI classification (default)Telemetry samples (not persisted)United StatesAnthropic Trust Center
OpenAIAI classification (configurable)Telemetry samples (not persisted)United StatesOpenAI Trust Portal
WorkOSAuthentication (SSO)User email, authentication tokensUnited StatesWorkOS Security
StripePayment processingBilling information, payment methodsUnited StatesStripe Security

Self-Hosted Option

When you self-host the control plane, you control which third-party services are used: Required - None. Self-hosted control plane runs entirely in your infrastructure. Optional - You can configure Tero to use your own AI provider (AWS Bedrock, Azure OpenAI, etc.) with your API keys and data residency requirements. Not applicable - GCP, WorkOS, and Stripe are only used for Tero-hosted control plane.

Data Flow

Tero-hosted control plane:
  1. Your observability platform API (read-only) → Tero control plane (GCP)
  2. Telemetry samples → AI provider (Anthropic or OpenAI) → Classification results → Tero
  3. User authentication → WorkOS → Tero
  4. Billing events → Stripe → Tero
Self-hosted control plane:
  1. Your observability platform API (read-only) → Your infrastructure
  2. Telemetry samples → Your AI provider (or none) → Your infrastructure
  3. No external services required

Sub-Processor Changes

We’ll notify customers at least 30 days before adding new sub-processors that process customer data. Notification sent via email to account administrators. Last updated: 2025-01-23

Questions?

Need Data Processing Agreements with our sub-processors? Questions about data flow? Email .