Sub-Processor List

Last updated: 6 April 2026

Under UK GDPR, we are required to disclose the third-party sub-processors that process personal data on our behalf. This page lists all sub-processors currently used by Auxilis.

Current Sub-Processors

Sub-Processor	Purpose	Data Location	DPA in Place
Amazon Web Services (AWS) Amazon Web Services EMEA SARL	Cloud infrastructure hosting, AI model inference (via Amazon Bedrock)	London, UK (eu-west-2)	Yes — AWS DPA with UK Addendum
Anthropic via AWS Bedrock (no direct relationship)	AI model provider (Claude). Accessed only through AWS Bedrock — no data sent directly to Anthropic.	Processed within AWS London region	Covered by AWS Bedrock DPA
Stripe Stripe Payments Europe, Ltd (Ireland)	Payment processing and subscription billing	EU (Ireland) with UK adequacy	Yes — Stripe DPA

What Data Each Sub-Processor Receives

AWS (Amazon Bedrock)

Receives: Query text for AI processing
Does NOT receive: Your original documents (processed locally in your browser)
Retention: 7 days for abuse monitoring, then auto-deleted
Training: Data is NEVER used to train AI models (contractual guarantee)

Stripe

Receives: Name, email, payment card details
Does NOT receive: Chat content, documents, or legal data
PCI DSS: Level 1 compliant (highest level)

Sub-Processors We Do NOT Use

No analytics providers (no Google Analytics, Mixpanel, etc.)
No advertising networks
No email marketing platforms
No customer data platforms
No third-party AI providers other than Anthropic via Bedrock

Changes to This List

We will update this page if we add or change sub-processors. Material changes will be notified to customers via email at least 30 days before the change takes effect. If you object to a new sub-processor, you may terminate your subscription.

Questions

If you have questions about our sub-processors, email us at [email protected]