APLEXICA

Our sub-processors.

A complete and current list of every third party that processes data on Aplexica's behalf. We notify customers at least 30 days before a new sub-processor is added.

Updated
2026-05-26
Notice period
30 days
Contact
privacy@aplexica.com
Provider Purpose Data categories Regions Terms
Amazon Web Services, Inc.
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
Cloud infrastructure (compute, storage, networking) for the Aplexica Cloud control plane and managed relay.
  • Encrypted artifact payloads (ciphertext only)
  • Routing metadata (envelope addressing)
  • Operational logs
  • Account identifiers
  • us-east-1 (primary)
  • eu-west-1 (planned, Pro+)
Stripe, Inc.
Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA
Payment processing for self-serve paid tiers (Personal, Pro, Team).
  • Billing address
  • Tax identifiers (where applicable)
  • Payment-card token (Stripe holds card data directly)
  • Subscription state
  • United States
Amazon Web Services, Inc. (Cognito)
Amazon Web Services, Inc. (Cognito product)
User authentication and identity provider integration (SAML, OIDC, SCIM) for Aplexica Cloud.
  • Email address
  • Authentication metadata (timestamps, IP, MFA factors)
  • SSO assertions (Enterprise only)
  • us-east-1
Amazon Web Services, Inc. (SES)
Amazon Web Services, Inc. (SES product)
Transactional email delivery — sign-in codes, password resets, account notifications, billing receipts. No marketing email is sent via Aplexica.
  • Email address
  • Transactional message content (e.g. "Your sign-in code is …")
  • us-east-1
EMQX (self-hosted on AWS)
EMQX, Inc. (software supplier — no customer-data access)
MQTT broker for the Aplexica-managed relay. Operated by Aplexica on AWS-provided infrastructure; EMQX, Inc. is the upstream provider of the broker software but does not see customer data.
  • Encrypted artifact payloads (ciphertext only)
  • Routing metadata (envelope addressing)
  • us-east-1
GitHub, Inc.
GitHub, Inc. (a subsidiary of Microsoft Corporation), 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA
Source control + CLA Assistant integration for open-source contributors. Not used for Aplexica Cloud customer data.
  • GitHub username (only for contributors who sign the CLA)
  • CLA signature record
  • United States

We notify customers by email at least 30 days before adding a new sub-processor in a category that processes personal data. To subscribe to sub-processor change notifications, email privacy@aplexica.com.

Want the full data-processing picture?

The Data Processing Addendum and security overview are linked from the Trust page.