Sub-processors
Last updated: September 1, 2026
Drixavo engages the following sub-processors to process personal data in connection with the Service. A sub-processor is a third-party data processor engaged by Drixavo who agrees to receive and process personal data on behalf of Drixavo's customers.
Changes to this list will be notified in accordance with the terms of the applicable Data Processing Agreement or Terms of Service.
This page does not represent that Standard Contractual Clauses have been executed. Where a restricted transfer requires contractual safeguards, the applicable transfer terms must be executed before that transfer.
Update owner: Drixavo, Inc. — info@drixavo.com
Sub-processors
| Sub-processor | Service | Purpose | Data location | Transfer safeguard |
|---|---|---|---|---|
| Supabase Inc. | Supabase | Database hosting, authentication, edge functions, file storage, real-time features | AWS eu-west-1 (Ireland) | Transfer terms required before any restricted transfer |
| OpenAI, LLC | OpenAI API | AI/LLM processing — generating responses to user prompts | USA | Transfer terms required before any restricted transfer |
| Anthropic PBC | Anthropic API | AI/LLM processing — generating responses to user prompts | USA | Transfer terms required before any restricted transfer |
| Google LLC | Gemini API / Vertex AI | AI/LLM processing — generating responses to user prompts | USA / EU (configurable) | Transfer terms required before any restricted transfer |
| Microsoft Corporation | Azure OpenAI | AI/LLM processing — generating responses to user prompts | USA / EU (configurable) | Transfer terms required before any restricted transfer |
| Amazon Web Services, Inc. | Amazon Bedrock | AI/LLM processing — generating responses to user prompts | USA / EU (configurable) | Transfer terms required before any restricted transfer |
| OpenRouter | OpenRouter API | AI/LLM routing and processing — generating responses to user prompts | USA (default) | Transfer terms required before any restricted transfer |
| Resend Inc. | Resend | Email delivery — authentication, notification, and transactional emails | AWS us-east-1 (USA) | Transfer terms required before any restricted transfer |
| Google LLC | Firebase Cloud Messaging | Push notification delivery to mobile devices | USA / EU | Transfer terms required before any restricted transfer |
| PayPro Global Inc. | PayPro Global | Payment processing — subscriptions, billing, invoicing, and transaction handling | Canada / EU / USA | Transfer terms required before any restricted transfer |
| Oracle Corporation | Oracle Cloud Infrastructure | Web application and landing site hosting (self-managed VM) | USA | Transfer terms required before any restricted transfer |
Infrastructure and network services
The following services provide DNS resolution, traffic proxying, and SSL termination. They do not access or store personal data beyond standard network-level metadata.
| Provider | Service | Purpose |
|---|---|---|
| Cloudflare, Inc. | Cloudflare DNS / Proxy | DNS resolution, DDoS protection, SSL termination, traffic proxying |
| Internet Security Research Group | Let's Encrypt | SSL/TLS certificate issuance |
Notes
- AI providers: Organizations may configure their own API keys for any supported AI provider. When a customer brings their own key, the provider relationship may differ from the default arrangement described above.
- Google integrations (Drive, Calendar): These are user-authorized independent services. Google acts as an independent controller, not a sub-processor, for data processed through these integrations.
- Mobile app stores (Google Play, Apple App Store): App distribution platforms act as independent controllers for app downloads and related data.
- Changes: Sub-processors may be added or removed as the Service evolves. Registered customers will be notified of material changes in accordance with the applicable Data Processing Agreement.