Sub-Processor List
Last updated: 16.07.2026
Sub-Processor List
For each sub-processor we use, we apply the principle of least privilege: each third party only accesses the minimum data required to fulfil its purpose. This list includes all sub-processors that may process personal data on our behalf, regardless of how frequently or in what volume they do so.
| Sub-processor | Purpose | Data Categories Processed | Location | Transfer Mechanism |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Hosting and infrastructure | Personal data included in Content | EEA | EEA-internal |
| Google Cloud Platform (GCP) | Hosting and infrastructure | Personal data included in Content | EEA | EEA-internal |
| MongoDB Atlas | Application database | Personal data included in Content | EEA | EEA-internal |
| Zilliz | Vector database | Personal data included in Content | EEA | EEA-internal |
| Google Vertex AI | AI model infrastructure | Personal data included in Content | EEA | EEA-internal for EU-regional calls; Google DPA + SCCs for global-endpoint calls |
| Google Gemini | AI model provider | Personal data included in Content | Global endpoint | Google DPA + Standard Contractual Clauses |
| Anthropic (Claude) | AI model provider | Personal data included in Content | EEA | EEA-internal |
| OpenAI | AI model provider | Personal data included in Content | US | Standard Contractual Clauses |
This list does not include vendors used solely to process data for which Apilex acts as controller (for example, marketing, sales, CRM, and payment tools), as those relationships are addressed in our Privacy Policy rather than under our Data Processing Addendum.
If you have any questions about this list, or would like to be notified of updates, please contact us at privacy@apilex.ai.