Sub-processor List

Effective: July 2026 | Region: Europe (EU)

Contents

  1. Change Notice
  2. Infrastructure Sub-processors
  3. Third-Party Services
  4. Sub-processor Engagement Process
  5. Questions

1. Change Notice

Aethrix reviews its sub-processors at least annually. Changes are notified 30 days in advance via email. You may object by contacting privacy@aethrixstudio.com.

Announced changes

Nothing has been announced that is not already in effect. The list below is what is in use today.

Last reviewed: July 2026

2. Infrastructure Sub-processors

The following sub-processors provide cloud infrastructure for Aethrix services in the Europe (EU) region:

Sub-processor Service Data Location Certifications
Microsoft Azure Cloud infrastructure (compute, storage, networking) Ireland, Netherlands, Germany ISO 27001, SOC 2 Type II, EU Cloud CoC
Azure Cosmos DB NoSQL metadata storage Ireland, Netherlands ISO 27001, SOC 2 Type II
Azure Blob Storage Binary/package storage Ireland, Netherlands ISO 27001, SOC 2 Type II
SendGrid (Twilio) Email delivery (notifications, verification) EU (Frankfurt) ISO 27001, SOC 2 Type II, GDPR DPA

All EU sub-processors are contractually bound to GDPR Art. 28 terms. No data leaves the EU/EEA.

3. Third-Party Services

Aethrix may use additional third-party services for specific features (e.g., AI Assistant, payment processing). These are disclosed separately and only process data when the feature is used.

  • Payment Processing: Stripe, Inc. (US) — for subscription billing. Only billing data, not API testing data.
  • AI Assistant (opt-in): LLM provider per deployment — for AI Assistant feature (only when explicitly invoked by the user).

4. Sub-processor Engagement Process

Aethrix evaluates potential sub-processors for:

  • Security posture (SOC 2 Type II, ISO 27001, or equivalent)
  • Data protection compliance per the region's legal requirements
  • Geographic residency (must match the region)
  • Contractual data processing obligations equivalent to this DPA
  • Right to audit and deletion commitments

5. Questions

For questions about sub-processors: privacy@aethrixstudio.com

To receive notifications of sub-processor changes: ensure your account email is current.

Terms of Service · Privacy Policy · DPA

© 2026 Aethrix. All rights reserved.