Last Updated: March 2026
TensorX engages the following third-party sub-processors to provide our Services. This page is maintained in accordance with Section 5 of our Data Processing Agreement.
Change notifications: We will provide at least 14 calendar days’ written notice before engaging a new sub-processor or replacing an existing one. To receive notifications of changes, subscribe by emailing [email protected] with the subject line “Sub-processor notifications”.
Current Sub-processors
| Sub-processor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Cloudflare, Inc. | CDN, DNS, network security, DDoS protection, and WAF | EU (European data centres) | N/A (EU processing) |
| Amazon Web Services, Inc. (AWS) | Cloud infrastructure (eu-west-1) | EU (European data centres) | N/A (EU processing) |
| Railway Corp. | Application deployment and hosting infrastructure | EU (European data centres) | N/A (EU processing) |
| Verda | Data centre / colocation infrastructure (GPU hosting) | Helsinki, Finland, EU | N/A (EU processing) |
| Digital Realty Trust, Inc. | Data centre / colocation infrastructure (GPU hosting) | Dublin, Ireland, EU | N/A (EU processing) |
| Google LLC (Workspace) | Email and internal communications | EU (European data centres) | N/A (EU processing) |
| Stripe, Inc. | Payment processing (card payments) | EU (European data centres) | N/A (EU processing) |
| DeusXPay | Cryptocurrency payment processing | EU (European data centres) | N/A (EU processing) |
| Resend (Plus Five Five, Inc.) | Transactional and marketing email delivery | United States | EU Standard Contractual Clauses (SCCs) |
| Intercom R&D Unlimited Company | Customer support chat and messaging | EU / United States | EU Standard Contractual Clauses (SCCs) |
| Attio Limited | Customer relationship management | EU / UK / United States | EU Standard Contractual Clauses (SCCs) + UK Addendum |
Key Points
- EU-first: The vast majority of our sub-processors process data within the EU. Where data is processed outside the EEA, EU Standard Contractual Clauses are in place.
- No model providers: TensorX hosts open-source models on its own infrastructure. No customer data (including prompts and completions) is shared with model developers or providers.
- Objection right: Customers may object to a new sub-processor on reasonable data-protection grounds within 14 days of notification. See Section 5.2 of the DPA.
- Contractual protections: All sub-processors are bound by data processing agreements with protections no less strict than those in our DPA.
If you have any questions about our sub-processors or wish to subscribe to change notifications, contact [email protected].