AXIRU
Legal

Sub-processors

Axiru uses the following third-party sub-processors to deliver and operate the platform. Each processor is bound by a Data Processing Agreement (DPA) and processes data only as necessary for the stated purpose.

Last updated: 2026-04-19
NamePurposeData accessedLocationDPA linkLast updated
ClerkUser authenticationEmail, name, password hash, session tokensUSDPA2026-04-19
CloudflareBot protection (Turnstile)IP address, user agentGlobalDPA2026-04-19
GitHubSource code hosting (internal only, not customer data)CodeUSDPA2026-04-19
NeonPrimary databaseAll application dataUS (AWS us-east-2 primary)DPA2026-04-19
ResendTransactional emailRecipient email addresses, message contentUSDPA2026-04-19
StripePayment processingMerchant payout accounts, refund eventsGlobal (US primary)DPA2026-04-19
UpstashRate limiting cacheHashed IP addresses (ephemeral)GlobalDPA2026-04-19
VercelApplication hostingHTTP logs, function invocationsGlobal (edge)DPA2026-04-19

Subscribe to changes

We notify customers when sub-processors are added, removed, or materially changed. Subscribe to updates via our RSS feed.

Email notification list coming soon. In the meantime, use the RSS feed for programmatic monitoring.

Questions?

If you have questions about our sub-processors or data processing practices, contact us at privacy@axiru.com.