Processing chain
Subprocessor transparency
Inventory of suppliers that may process personal data when Aixy provides the service.
How to read this list
Only suppliers verified as active in production and covered by signed data-processing terms should appear in the final public list. “Conditional” means the supplier processes data only when the related feature is enabled. Customer-selected model providers vary by account and instruction.
Amazon Web Services
CorePurpose: compute, networking, databases, encryption, logs, backups and operational analytics.
Primary location: Frankfurt, Germany (eu-central-1).
Public terms reviewed: AWS GDPR and DPA information.
Before publication: retain account acceptance, verify contracting entity, services, support access and transfer safeguards.
Cloudflare
CorePurpose: DNS, edge delivery, website hosting and same-origin dashboard routing.
Location: global edge network.
Public terms reviewed: Cloudflare Customer DPA.
Before publication: retain account acceptance and verify active products, log settings and transfer safeguards.
Datadog
VerifyPurpose: infrastructure and product observability without prompts or responses.
Location: confirm the production Datadog site and support-access model.
Public terms reviewed: Datadog DPA.
Before publication: confirm production activation, account acceptance, retention and transfer mechanism.
Resend
ConditionalPurpose: invitations, password resets and operational notification email.
Data: recipient address, message content and delivery metadata.
Public terms reviewed: Resend DPA.
Before publication: confirm production activation, account acceptance, contracting entity, retention and transfer mechanism.
Stripe
ConditionalPurpose: subscription checkout, billing portal and payment status.
Data: billing contact and transaction information; Aixy stores only a bounded subscription projection.
Public terms reviewed: Stripe DPA.
Before publication: confirm production activation, account acceptance, controller/processor allocation and applicable Stripe entity.
Customer-selected model providers
By instructionPurpose: perform the inference request selected by the customer.
Location: depends on provider, account, endpoint and region selected by the customer.
Before use: record the provider, role, region, DPA, training/retention settings and any Chapter V transfer mechanism.
Change notifications
The executed DPA must define advance notice and a reasonable objection mechanism before Aixy appoints a new subprocessor for customer personal data. Contact [email protected] for the current verified list.