Back to Security & Trust

Sub-processors

Every external service that processes customer data, what it sees, and where it runs. We publish this list and update it when we add or remove a vendor.

Last updated: October 2026

Infrastructure

Google Cloud Platform

Toronto, Canada (northamerica-northeast2)

Compute, database, object storage, networking, encryption keys, secret management

Accesses: All customer data (encrypted at rest and in transit)

Firebase Hosting (Google)

Global CDN; backend API requests are proxied to our Cloud Run service in Toronto.

Serves the static web application (HTML, JavaScript, CSS) via global CDN

Accesses: No customer data — Firebase Hosting only serves our compiled web bundle.

Google Analytics (Google)

Google global infrastructure; may be outside Canada.

Visit statistics for the public website only (not loaded inside the platform)

Accesses: Pages viewed, referring site, approximate location, device and browser type, analytics cookie identifiers. No farm data.

Authentication

Firebase Authentication (Google)

Managed by Google as part of Identity Platform; metadata location is configured at the Google Cloud project level.

User authentication (login, password reset, session tokens)

Accesses: Email address, hashed password, authentication session metadata. No farm data.

Imagery providers

Sentinel Hub (Sinergise)

European Union

Satellite imagery (Sentinel-2)

Accesses: Field bounding boxes only; no customer data sent

Mapbox / MapLibre tile services

United States / global CDN

Base map rendering

Accesses: Map viewport coordinates only

Equipment integrations (opt-in)

John Deere Operations Center

United States

Equipment data sync (opt-in per organization)

Accesses: Equipment, field, and operations data from JD accounts you connect

CNH Industrial FieldOps

United States

Equipment data sync (opt-in per organization)

Accesses: Equipment, field, and operations data from CNH accounts you connect

PTX / AGCO FarmENGAGE

United States

Equipment data sync (opt-in per organization)

Accesses: Equipment, field, and operations data from AGCO accounts you connect

DJI Cloud

United States (DJI Cloud Americas)

Drone fleet management (opt-in per organization)

Accesses: Drone mission data, telemetry, captured imagery

Questions about a vendor?

Email security@agronome.ai and we'll share the relevant contract terms, retention windows, or data flow diagrams.

Setting up an enterprise firewall or proxy? See the network allowlist for the hostnames a user's browser needs to reach.