Sub-processors
Last Updated: July 7, 2026
Last Updated: July 7, 2026
Art of X UG (haftungsbeschränkt) uses the following sub-processors to provide our services. This list is updated when changes occur.
Current Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Cloudflare | CDN, DNS, DDoS protection, web security | USA (global edge network) |
| DigitalOcean | Cloud infrastructure, hosting | Germany (Frankfurt) |
| Supabase | Database, authentication | EU (Stockholm) |
| OpenAI | LLM API for AI processing, embeddings, transcription | USA |
| Anthropic | LLM API for AI processing | USA |
| Google AI (Gemini / Vertex AI) | LLM API for AI processing and AI image generation | USA (global) |
| ElevenLabs | Text-to-speech voice generation | UK |
| Tavily | Web search and content retrieval | USA |
| Firecrawl (SideGuide Technologies) | Web content extraction, visual page analysis | USA |
| Langfuse | LLM observability and tracing | Germany |
| Resend | Transactional email delivery | USA |
| Stripe | Payment processing | Ireland (EU data) |
| PostHog | Product analytics | EU |
| Google Analytics | Web analytics | USA |
| TikTok | Conversion tracking via TikTok Pixel (marketing consent required) | Ireland/USA |
| X (Twitter) | Conversion tracking via X Pixel (marketing consent required) | USA |
| Twilio | SMS, WhatsApp messaging, voice calls, phone number provisioning | USA |
| Deepgram | Speech-to-text transcription | USA |
| Fish Audio (Hanabi AI Inc.) | Voice cloning, text-to-speech | USA |
| Apify | Web content extraction, social media scraping | Czech Republic (EU) |
| Google Firebase (FCM) | Push notifications | USA |
| RevenueCat | In-app purchase management (iOS) | USA |
| Slack (Salesforce) | Internal notifications (webhooks) | USA |
| Google Calendar API | Calendar integration | USA |
| Google Drive API | File attachments from Google Drive (user-selected files) | USA |
| Microsoft Graph API (OneDrive) | File attachments from OneDrive (user-selected files) | USA |
| Figma API | Design attachments from Figma (user-selected files, rendered to images) | USA |
User-selected external clients
External clients chosen by the user to connect to Minds (for example ChatGPT, Claude, OpenRouter, Open WebUI, LibreChat, or similar tools) are independent services. They are not Art of X sub-processors unless Art of X engages them to process data on its behalf. Their processing is governed by their own terms and privacy notices.
Data Transfer Safeguards
For sub-processors located outside the European Economic Area (EEA), the applicable transfer mechanism and contractual measures are assessed for each vendor and processing activity. The legal requirement for processor terms does not depend on whether a vendor makes its preferred contract available. Depending on the transfer, safeguards may include:
- Standard Contractual Clauses (SCCs) where required
- EU-US Data Privacy Framework certification where applicable
- Data Processing Agreements or equivalent contractual terms where legally required
If legally required processor terms or transfer safeguards cannot be put in place, the affected processing must not begin or must be suspended until the gap is resolved. Additional technical and organizational measures, including data minimization, may be required by the assessment.
Changes to Sub-processors
We will notify customers of any intended changes to sub-processors with at least 14 days notice before the change takes effect. Notifications are sent to the email address associated with your account.
To object to a new sub-processor, contact us at [email protected] within 14 days of notification.
Questions
For questions about our sub-processors, contact: [email protected]
Art of X UG (haftungsbeschränkt) Köpenicker Straße 145, 10997 Berlin, Germany