Cloud infrastructure
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, storage, databases | US (Virginia, Oregon) |
| Supabase (PostgreSQL) | Database hosting and management | US (AWS us-east-1) |
| Cloudflare | CDN, DDoS protection, DNS | Global |
Analytics & monitoring
| Subprocessor | Purpose | Location |
|---|---|---|
| Datadog | Application monitoring, logging, alerting | US |
| Sentry | Error tracking and performance monitoring | US (EU option available) |
Communication & support
| Subprocessor | Purpose | Location |
|---|---|---|
| Slack | Team communication (internal use) | US |
| Zendesk | Customer support ticketing | US |
| SendGrid | Email delivery for notifications | US |
Authentication & security
| Subprocessor | Purpose | Location |
|---|---|---|
| Auth0 | Authentication and identity management | US |
| 1Password | Secrets and credential management | Canada |
Data protection commitments
All subprocessors are contractually bound by Data Processing Agreements that include:
- Confidentiality and security obligations
- Data protection and compliance requirements
- Audit and inspection rights
- Data deletion or return upon contract termination
Changes to subprocessors
Arx may update this list as service providers change. We notify customers of material changes in advance and provide the opportunity to object.
For current version or to receive notifications of changes, contact privacy@arxsec.io.