Subprocessors
Commentary uses a small set of subprocessors to host the service, access connected Git provider data, authenticate users, and operate review workflows. This page lists the providers currently used in the live product.
Current providers
GitHub
Repository access, pull request metadata, GitHub App authentication, and provider-side review synchronization.
Data categories: GitHub account identifiers, repository metadata, pull request metadata, review comments, and installation metadata.
Location: Global service operated by GitHub, Inc.
Website: https://github.com
Azure DevOps and Microsoft Entra ID
Azure DevOps repository access, pull request metadata, Microsoft Entra authentication, and provider-side review synchronization.
Data categories: Microsoft account identifiers, Azure DevOps organization and project metadata, repository metadata, pull request metadata, review comments, granted scopes, and token metadata.
Location: Global services operated by Microsoft.
Microsoft Azure
Application hosting, storage, and operational monitoring.
Data categories: Encrypted auth state, review data, repository metadata, logs, telemetry, and backup artifacts.
Location: Azure regions selected by Commentary operators.
Website: https://azure.microsoft.com