Skip to content
Transparency

Sub-processors

Last updated: June 13, 2026

Digitalix Hub uses the following sub-processors to deliver its services. We notify customers at least 14 days before adding a new sub-processor, per our DPA.

Platform Sub-processors

These processors handle data as part of normal platform operations.

Hetzner Online GmbH

Germany (EU)

Infrastructure hosting β€” application servers, database, and object storage

Data categories: All service data (account info, company memory, agent tasks, encrypted tokens)

Anthropic, PBC

United States (Anthropic Commercial Terms incorporating SCCs; API data is not used to train models; retained up to 30 days for safety/security then deleted)

LLM processing for AI agents on the default plan (the platform-provided API key). Prompts and outputs β€” which may include company data the customer's agents work with β€” are sent to Anthropic's API to generate agent responses. Customers on the bring-your-own-key model use their own Anthropic agreement instead (see Customer-Controlled Processors below).

Data categories: Agent prompts and outputs (may include company memory, customer/deal records, and other business data the agent processes)

Stripe, Inc.

United States (SCCs in place)

Payment processing and subscription management

Data categories: Billing details, subscription state, payment method tokens (no raw card numbers stored by us)

SMTP Provider (Self-hosted / AWS SES)

EU (self-hosted) or US (SES, SCCs in place)

Transactional email delivery (onboarding, approvals, notifications, weekly digests)

Data categories: Email addresses, email content (generated by agents, reviewed by customer)

PostgreSQL (Self-hosted)

Germany (EU) β€” Hetzner infrastructure

Primary relational database β€” all structured data

Data categories: Account records, company data, agent configurations, task history, approvals

S3-Compatible Object Storage (Self-hosted)

Germany (EU) β€” Hetzner infrastructure

File and artifact storage β€” exports, attachments, memory artifacts

Data categories: User-uploaded files, agent-generated outputs, data export bundles

Google Analytics 4 / Tag Manager

United States (SCCs via Google Ads Data Processing Terms)

Website analytics (marketing site), loaded only after consent

Data categories: Pseudonymous usage events, truncated/anonymised IP, cookie identifiers (no account credentials or company data)

Customer-Controlled Processors

These processors are only engaged when the customer provides their own API keys (BYO key model). The customer acts as Controller for these transfers and is responsible for ensuring appropriate safeguards.

Anthropic, PBC

United States

LLM API calls (when customer provides BYO API key)

OpenAI, Inc.

United States

LLM API calls (when customer provides BYO API key)

What we do NOT use

Digitalix Hub does not use any third-party logging, error tracking, or observability services (no Sentry, Datadog, LogRocket, PostHog, etc.). All telemetry is self-hosted. Your agents' prompts, outputs, and memory never leave our infrastructure.

See also: DPA Β· Privacy Policy Β· Terms of Service

Changes notified to: the email address on your account

Sub-processors | Digitalix Hub