Legal
Sub-processors
Everyone whose hands a client's data passes through, and the discipline we apply to that list.
Last updated: June 2026
How we choose them
Few, and on purpose. Each one is selected for what it does well enough to be trusted with an operation, not for convenience. We do not assemble a service out of whatever is cheapest this quarter, and we do not add a dependency without a reason we could defend to the client whose data it touches.
The current list
We maintain a current list of our sub-processors, what each one handles, and where it sits. We provide it to clients under agreement rather than publishing it. The stack a serious operation runs on is not marketing material, and we treat ours the same way.
Where this is going
We are moving the parts of the work that can be moved onto infrastructure we own and control. The direction is fewer hands on a client's data over time, not more.
Changes
Clients under agreement are notified of material changes to the sub-processors that handle their data before those changes take effect, on the terms set out in the engagement.
Request the list
To review the current sub-processor list, contact privacy@auctusapex.com.