Subprocessors and Service Providers
Last updated: 28 July 2026 - CloudOps S.L.
These providers support UxxU infrastructure and related service operations. Not every provider receives Customer architecture content. The applicable processing depends on the features a Customer uses.
Amazon Web Services EMEA SARL and AWS affiliates
- Purpose and data
- Cloud hosting, API processing, PostgreSQL database, object storage, CDN, collaboration state, logs, backups, and transactional emailAccount data, Customer content, files, logs, and email delivery data
- Location
- Primary application and data region: US East (N. Virginia), us-east-1; CloudFront uses a global edge network
- Transfer terms
- AWS Data Processing Addendum; EU-US Data Privacy Framework adequacy under Article 45 for covered US processing; AWS Standard Contractual Clauses where the DPF does not apply
Stripe and the applicable Stripe contracting entity
- Purpose and data
- Subscription billing, payment processing, and invoicesAccount contact, customer, subscription, billing, and transaction data
- Location
- European Union and United States, depending on the Stripe service
- Transfer terms
- Stripe data processing terms and Standard Contractual Clauses where applicable
Google Ireland Limited and Google affiliates
- Purpose and data
- Google sign-in and reCAPTCHA abuse preventionGoogle account identity selected by the user, and device, network, and interaction data for reCAPTCHA
- Location
- European Union and United States
- Transfer terms
- Google service data protection terms and Standard Contractual Clauses where applicable
Rybbit hosted cloud service
- Purpose and data
- Optional, consent-based public website analyticsPage views, referrer, events, session duration, approximate location, and a pseudonymous visitor identifier
- Location
- Germany (Hetzner-hosted infrastructure)
- Transfer terms
- Processing in the European Economic Area under the provider's published privacy and security terms
| Provider | Purpose and data | Location | Transfer terms |
|---|---|---|---|
| Amazon Web Services EMEA SARL and AWS affiliates | Cloud hosting, API processing, PostgreSQL database, object storage, CDN, collaboration state, logs, backups, and transactional email Account data, Customer content, files, logs, and email delivery data | Primary application and data region: US East (N. Virginia), us-east-1; CloudFront uses a global edge network | AWS Data Processing Addendum; EU-US Data Privacy Framework adequacy under Article 45 for covered US processing; AWS Standard Contractual Clauses where the DPF does not apply |
| Stripe and the applicable Stripe contracting entity | Subscription billing, payment processing, and invoices Account contact, customer, subscription, billing, and transaction data | European Union and United States, depending on the Stripe service | Stripe data processing terms and Standard Contractual Clauses where applicable |
| Google Ireland Limited and Google affiliates | Google sign-in and reCAPTCHA abuse prevention Google account identity selected by the user, and device, network, and interaction data for reCAPTCHA | European Union and United States | Google service data protection terms and Standard Contractual Clauses where applicable |
| Rybbit hosted cloud service | Optional, consent-based public website analytics Page views, referrer, events, session duration, approximate location, and a pseudonymous visitor identifier | Germany (Hetzner-hosted infrastructure) | Processing in the European Economic Area under the provider's published privacy and security terms |
Architecture content and AI providers
The hosted UxxU application does not currently send Customer architecture content to OpenAI, Anthropic, or another LLM provider. UxxU MCP integrations run in the Customer's chosen AI environment using the Customer's provider relationship and configuration.
Provider changes
We publish changes to this page at least 30 days before a new provider begins processing Customer Personal Data. Subscribe below to be notified of changes. Customers may raise a reasonable data-protection objection within that period by contacting info@uxxu.io.
Change history
- 28 July 2026
- Initial subprocessor list published.
The contractual terms for Customer-controlled Personal Data are in the Data Processing Agreement.