Buddy
Visual CI/CD and deployment automation for teams that want UI-first pipelines, YAML control and cloud or on-prem runtime options.
Profile last updated: · View sources
About Buddy
Buddy is a CI/CD and deployment automation platform operated by BDY PSA in Warsaw, Poland. It lets engineering teams build, test and deploy code through visual pipelines or YAML, connect GitHub, GitLab, Bitbucket and other event sources, and run actions in containers across Intel, ARM, Linux, Windows, Mac and NixOS targets.
The service is sold as a subscription platform with cloud and on-premises standards. Buddy also offers environments, visual reviews, secure tunnels, domains and Dev Cloud hosting. Its CLI docs expose region selection at registration, including an as value, but Buddy's privacy policy publicly documents EU and US infrastructure providers; the Asia endpoint is tracked here only as an observation until Buddy documents it as a customer-data storage region.
Features
- Visual and YAML pipelines for build, test and deploy workflows.
- Cloud and on-premises standards for CI/CD automation.
- Containerized actions across Intel, ARM, Linux, Windows, Mac and NixOS targets.
- Event triggers from GitHub, AWS, Slack, servers and other systems.
- Secrets store, OIDC and advanced permissions for pipeline governance.
- Environments with BYOC or Buddy-hosted provisioning for every branch, PR or demo.
- Secure tunnels for HTTP, TLS or TCP access with OAuth, SAML and OIDC protection.
- Dev Cloud deploys MicroVMs and static sites from pipelines with zero downtime.
Alternatives
Other European companies in the same category as Buddy.
Sovereignty Scorecard
Procurement-grade signals on data sovereignty, ownership, and EU residency.
We score every European vendor against six sovereignty dimensions captured in the SHIELD acronym. Each card below maps to one letter — read them as a checklist when comparing providers.
Third parties that may touch customer data, such as processors, subprocessors, payment providers, KYC vendors, support chatbots, analytics, and independent controllers disclosed by the vendor.
Where the legal entity sits, who controls it, and which subsidiaries operate under the same group.
Where customer data is physically stored, who runs the hosting stack, which CDN sits in front.
Whether public sources indicate the vendor or its data-processing third parties may fall under the US CLOUD Act or other extraterritorial reach.
Public terms, privacy policy, DPA, subprocessor list, impressum, and security or trust pages.
Independent audits and certifications (ISO 27001, BSI C5, TISAX, SOC 2) plus open-source transparency.
Privately held
Polish KRS record 0001009631 lists BDY PROSTA SPÓŁKA AKCYJNA in Warsaw and describes Series A founder shares that preserve at least 75% of voting power. No non-European parent or acquisition is disclosed in Buddy's public legal pages or the KRS record reviewed.
🇵🇱 Warsaw, Poland
BDY PROSTA SPÓŁKA AKCYJNA
Region selectable
Buddy's privacy policy says data may be processed in the EU or US depending on configuration and names AWS and Hivelocity in the United States plus Hetzner Cloud in the EU. The CLI registration docs also expose --region with us, eu and as values, and the Git SSH docs say project URLs depend on the registration region. The Asia endpoint is retained as an observed endpoint only, not a structured storage or data-residency region, because Buddy's public privacy and infrastructure docs do not document Asia or Singapore customer-data storage.
Website: AWS CloudFront for the public website, observed from x-cache, via and x-amz-cf-* response headers.
Application: Buddy app plus service infrastructure; the privacy policy names AWS, Hivelocity and Hetzner Cloud as infrastructure providers.
Email: Google Workspace
CDN: AWS CloudFront
| Name | Country | Purpose |
|---|---|---|
| Amazon Web Services | 🇺🇸 United States | Hosting infrastructure for the Buddy service. |
| Hivelocity | 🇺🇸 United States | Hosting infrastructure for the Buddy service. |
| Hetzner Cloud | 🇩🇪 Germany | EU hosting infrastructure for the Buddy service. |
| Braintree | 🇺🇸 United States | Payment processing. |
| Google Workspace | 🇺🇸 United States | Email communication with clients. |
| Amazon Pinpoint | 🇺🇸 United States | Email and SMS notifications. |
| PostHog | 🇺🇸 United States | Product analytics. |
| Intercom | 🇺🇸 United States | Helpdesk and customer messaging. |
Listed on Buddy's public security page.
Listed on Buddy's public security page.
Pricing
€0
- 1 seat and 1 concurrent execution
- 300 pipeline GB-minutes
- 1 GB pipeline cache
- 300 sandbox CPU-minutes
- 730 sandbox GB-hours
€29
- 2 seats included; extra seats from USD $9/mo
- 1 concurrent execution; extra concurrency from USD $50/mo
- 3000 pipeline GB-minutes
- 10 GB pipeline cache
€99
- 5 seats included; extra seats from USD $29/mo
- 2 concurrent executions; extra concurrency from USD $50/mo
- 6000 pipeline GB-minutes
- Advanced permissions, SAML and OIDC
Questions & Answers
6 questions
Where is Buddy headquartered?
Buddy is operated by BDY PSA, a Polish prosta spółka akcyjna registered as KRS 0001009631, with its registered office at Twarda 18, 00-105 Warsaw. Buddy's terms and privacy policy both name the same Polish entity.
Where can customer data be processed?
Buddy's privacy policy says data may be processed in the EU or US depending on configuration and names AWS and Hivelocity in the United States plus Hetzner Cloud in the EU. The CLI registration docs also accept us, eu and as values, and the Git SSH docs say project URLs depend on the registration region. The Asia endpoint currently resolves to OVH Singapore IPs and sets a buddy:AP cookie, but this profile keeps structured residency regions to EU and US until Buddy documents Asia or Singapore customer-data storage. Selecting the EU region does not remove all US subprocessor exposure.
Which subprocessors or vendors does Buddy name publicly?
The privacy policy names Amazon Web Services, Hivelocity, Hetzner Cloud, Braintree, Google Workspace, Amazon Pinpoint, PostHog and Intercom for hosting, payments, email, notifications, analytics and customer messaging. Buddy does not publish a separate subprocessor page.
Does Buddy publish a DPA?
Buddy says customers can request a signed Data Processing Agreement by contacting support@buddy.works. The GDPR page describes Buddy as processor for private data stored in Git repositories, pipelines and sandboxes, with customers acting as controllers for that data.
Which security controls are public?
Buddy's security page lists SOC 2 Type II certification, PCI DSS, enforced 2FA, SAML 2.0, access audit logs, automated SSL certificates, custom roles, group permissions and multi-region high availability.
Is there a free plan?
Yes. Buddy lists a Free plan at €0 per month with one seat, one concurrent execution, 300 pipeline GB-minutes, 1 GB of pipeline cache, 300 sandbox CPU-minutes and 730 sandbox GB-hours. Paid Pro and Hyper plans add seats, pipeline capacity, cache and governance features.
Quick facts
Sources & provenance
This profile is compiled from cited public sources. Source URLs and latest source-check dates are listed below. Most recent source check: July 2, 2026.
Profiles use AI-assisted research with editorial review. Companies can request corrections at any time.
Found an error? Report it
Profile content
- primary · about-pagebuddy.worksHomepage product positioning and feature sections.
- primary · termsbuddy.works/terms-of-serviceScope of Service describes CI/CD, cloud and on-premises standards.
- primary · about-pagebuddy.worksHomepage describes pipelines, deployments, environments, tunnels, domains and Dev Cloud.
- primary · privacy-policybuddy.works/privacy-policyInfrastructure providers and residency caveat.
- primary · otherbuddy.works/docs/cli/registerCLI registration docs expose --region with us, eu and as values.
- primary · about-pagebuddy.worksPublic site and documentation reviewed in English.
- primary · pricing-pagebuddy.works/pricing
- primary · about-pagebuddy.works
- primary · security-pagebuddy.works/securitySecurity controls and access-management claims.
- primary · termsbuddy.works/terms-of-service
- primary · privacy-policybuddy.works/privacy-policy
- primary · otherbuddy.works/docs/cli/registerRegion options used in the data-residency Q&A.
- primary · otherbuddy.works/docs/git-hosting/ssh-keysDocs say project SSH URLs depend on registration region.
- primary · dns-recordsasia.buddy.worksasia.buddy.works resolves to 51.79.203.8 / 51.79.202.166; reverse DNS is ip*.ip-51-79-20*.net.
- primary · http-headersasia.buddy.worksHTTP response sets a buddy:AP region cookie.
- tertiary · otheripinfo.io/51.79.203.8/jsonIP geolocation places 51.79.203.8 in Singapore on AS16276 OVH SAS.
- primary · dpabuddy.works/gdprGDPR page says signed DPA is available by contacting support@buddy.works.
- primary · security-pagebuddy.works/security
- primary · pricing-pagebuddy.works/pricing
Sovereignty (SHIELD)
- primary · privacy-policybuddy.works/privacy-policyPrivacy policy vendor list used as the public subprocessor/vendor disclosure; no dedicated /subprocessors page was available.
- primary · termsbuddy.works/terms-of-service
- primary · privacy-policybuddy.works/privacy-policy
- registry · otherapi-krs.ms.gov.pl/api/krs/OdpisAktualny/0001009631Independent official Polish registry record with KRS, NIP and Warsaw address.
- registry · otherapi-krs.ms.gov.pl/api/krs/OdpisAktualny/0001009631Polish KRS API record for BDY PSA; Series A founder shares preserve at least 75% voting power.
- primary · termsbuddy.works/terms-of-serviceOfficial legal page names BDY PSA without a parent company.
- primary · privacy-policybuddy.works/privacy-policyNames AWS/Hivelocity US, Hetzner Cloud EU and states data may be processed in the EU or US depending on configuration.
- primary · otherbuddy.works/docs/cli/registerCLI registration docs expose --region with us, eu and as values.
- primary · otherbuddy.works/docs/git-hosting/ssh-keysProject SSH URLs depend on registration region.
- primary · dns-recordsasia.buddy.worksasia.buddy.works resolves to OVH Singapore IPs 51.79.203.8 and 51.79.202.166.
- primary · http-headersasia.buddy.worksHTTP response sets a buddy:AP region cookie.
- tertiary · otheripinfo.io/51.79.203.8/jsonIP geolocation places 51.79.203.8 in Singapore on AS16276 OVH SAS.
- primary · privacy-policybuddy.works/privacy-policyVendor list names AWS, Hivelocity and Hetzner Cloud for service infrastructure, plus Google Workspace for email.
- primary · http-headersbuddy.workscurl -I shows AWS CloudFront headers on the marketing site.
- primary · dns-recordsbuddy.worksMX records terminate at Google Workspace.
- primary · privacy-policybuddy.works/privacy-policyUS infrastructure and SaaS subprocessors are listed in the privacy policy.
- primary · termsbuddy.works/terms-of-service
- primary · privacy-policybuddy.works/privacy-policy
- primary · dpabuddy.works/gdprGDPR page says customers can request a signed DPA via support@buddy.works.
- primary · security-pagebuddy.works/security
- primary · security-pagebuddy.works/securityPublic security page lists SOC 2 Type II and PCI DSS.