Sub-processor List
1. Change Notice
Aethrix reviews its sub-processors at least annually. Changes are notified 30 days in advance via email. You may object by contacting privacy@aethrixstudio.com.
Announced changes
Nothing has been announced that is not already in effect. The list below is what is in use today.
Last reviewed: July 2026
2. Infrastructure Sub-processors
The following sub-processors provide cloud infrastructure for Aethrix services in the Europe (EU) region:
| Sub-processor | Service | Data Location | Certifications |
|---|---|---|---|
| Microsoft Azure | Cloud infrastructure (compute, storage, networking) | Ireland, Netherlands, Germany | ISO 27001, SOC 2 Type II, EU Cloud CoC |
| Azure Cosmos DB | NoSQL metadata storage | Ireland, Netherlands | ISO 27001, SOC 2 Type II |
| Azure Blob Storage | Binary/package storage | Ireland, Netherlands | ISO 27001, SOC 2 Type II |
| SendGrid (Twilio) | Email delivery (notifications, verification) | EU (Frankfurt) | ISO 27001, SOC 2 Type II, GDPR DPA |
All EU sub-processors are contractually bound to GDPR Art. 28 terms. No data leaves the EU/EEA.
3. Third-Party Services
Aethrix may use additional third-party services for specific features (e.g., AI Assistant, payment processing). These are disclosed separately and only process data when the feature is used.
- Payment Processing: Stripe, Inc. (US) — for subscription billing. Only billing data, not API testing data.
- AI Assistant (opt-in): LLM provider per deployment — for AI Assistant feature (only when explicitly invoked by the user).
4. Sub-processor Engagement Process
Aethrix evaluates potential sub-processors for:
- Security posture (SOC 2 Type II, ISO 27001, or equivalent)
- Data protection compliance per the region's legal requirements
- Geographic residency (must match the region)
- Contractual data processing obligations equivalent to this DPA
- Right to audit and deletion commitments
5. Questions
For questions about sub-processors: privacy@aethrixstudio.com
To receive notifications of sub-processor changes: ensure your account email is current.