SalexHub engages the third parties in sections 1 to 3 to help deliver the platform. Each is bound by written terms no less protective than our Data Processing Agreement, limited to processing on our instructions, and covered by an appropriate transfer mechanism where it processes outside the customer's region. Section 5 lists who processes messages in the chat without an account, which carries no data from any organization; its model providers work under their own terms.
This page is Annex III of the DPA. We give at least thirty (30) days' notice before a new subprocessor starts processing customer personal data. To receive those notices by email, write to start@salexhub.com with the subject “Subprocessor notifications”.
1Infrastructure
Always engaged. These hold or transmit the data in customers' organizations as part of running the platform.
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Vercel Inc. (United States) | Application and website hosting, edge routing, build and delivery; cookieless page-view and page-speed measurement of the website | All data in transit through the application; request metadata and logs | The application runs in Frankfurt, Germany; a global edge network routes and caches requests and checks sign-in sessions close to the visitor |
| Neon Inc. (United States) | Managed PostgreSQL, the primary datastore | All records in customers' organizations and the personal data stored in the product | European Union (Frankfurt, Germany), on Amazon Web Services |
| Cloudflare, Inc. (United States) | Object storage (R2) for files, attachments and generated documents | Uploaded files, attachments, generated PDFs and their metadata | European Union |
| Amazon Web Services, Inc. (United States) | Underlying data-centre infrastructure for the managed database | As above, at the infrastructure layer | European Union (Frankfurt, Germany) |
2AI model providers
Engaged when a customer uses AI features. Each provider below is contractually barred from training its models on data we send on a customer's behalf. Which provider serves a request depends on the deployment's configuration and, for enterprise customers, on the key they supply. The chat at chat.salexhub.com, used without an account, runs on other models under other terms: see section 5.
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Anthropic PBC (United States) | Default model provider for assistant, agent, drafting and analysis features | Prompt content: the instruction, the records in scope, retrieved documents, and prior turns of the conversation | United States |
| Vercel Inc. (AI Gateway) (United States) | Model routing and embedding generation for search over an organization's content, where enabled | Prompt content as above; text submitted for embedding | United States |
| Google LLC (United States) | Alternative model provider, where a deployment or customer selects it | Prompt content as above | United States |
| OpenAI, L.L.C. (United States) | Alternative model provider, where a deployment or customer selects it | Prompt content as above | United States |
A customer who supplies their own provider key contracts directly with that provider for the processing performed under it. Our commitments (including no training on customer data) bind our own providers, not a provider a customer brings.
3Payments and communications
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Stripe, Inc. (United States) | Payment processing for credit purchases and subscriptions | Billing contact details, payment method data (held by Stripe, never by us), transaction records | United States and European Union |
| Resend (Plus Five Five, Inc.) (United States) | Delivery of platform email (invitations, password resets, notifications), where configured as the platform sender | Recipient address, sender, subject and message content of platform email | United States and European Union |
Where a deployment sends platform email through its own SMTP relay instead, that relay is the customer's or operator's own provider and is not a SalexHub subprocessor. Business email a customer sends from a connected mailbox travels through that customer's own mail provider, not through ours.
4What we deliberately do not use
Stated because their absence is a design decision, and because a security questionnaire always asks:
- No advertising or marketing trackers on our website or in the application: no advertising networks, no analytics beyond our host's cookieless page-view and page-speed measurement of the website, no session-replay tooling, no third-party font or script CDNs.
- No data broker or enrichment vendor receives customer data.
- No observability vendor currently receives production telemetry. The platform can export traces and metrics over OpenTelemetry, and its instrumentation is built to carry identifiers and timings but never message bodies, prompt text or field values; if we engage a vendor for this, it will appear here first.
- No offshore support outsourcing. Support is handled by our own personnel.
5The chat without an account
Messages sent to the Agent at chat.salexhub.com without an account carry no data from any organization: we are their controller, as our Privacy Policy explains. This section is therefore not part of Annex III, and a change to it does not start the DPA's notice period. It is here so that anyone using the chat can see who processes their messages.
| Provider | Purpose | Data processed | Processing location |
|---|---|---|---|
| Cloudflare, Inc. (United States) | Network in front of chat.salexhub.com: receives each request and passes it to our application | Everything sent to the chat, in transit; the visitor's IP address | Global network, usually the data centre nearest the visitor |
| Vercel Inc. (AI Gateway) (United States) | Routes each message to a free model and returns the answer | The message, the conversation so far and the Agent's instructions | United States |
| Poolside (model Laguna S 2.1 Free) | Runs one of the free models that answer the chat | As above | Chosen by the provider; may be outside the European Union |
| inclusionAI (model Ling 3.0 Flash VL Free) | Makes the free model the chat tries first whenever the gateway offers it; the gateway then passes messages to the company that runs it | As above | Chosen by the provider; may be outside the European Union |
These model providers work under their own terms, not ours. The gateway lists no zero-data-retention and no no-training commitment for either model, so a provider may keep what it receives and use it to train its models. Nothing from an organization reaches them through the chat: without an account the Agent has no access to any organization.
6Changes and objections
We update this page before a new subprocessor begins processing. Customers may object on reasonable data-protection grounds within thirty (30) days of notice, under section 6 of the DPA; if we cannot resolve the objection, the customer may terminate the affected part of the Service and receive a pro-rata refund for the unused period.
We may replace a subprocessor without notice where necessary to address a security incident or the failure of a provider, and will update this page as soon as practicable afterwards.