Sub-processors
This page lists the third-party sub-processors ASTROX TECHNOLOGIES LTD engages to deliver the AstroX platform. It forms part of our Data Processing Agreement (Section 6) and is the single authoritative list referred to in our Privacy Policy. The notice and objection process for new sub-processors is set out in the DPA.
Current sub-processors
| Sub-processor | Purpose | Location and transfer safeguard |
|---|---|---|
| Cloud infrastructure provider (name and current hosting regions available on request at support@astroxtech.com) | Infrastructure hosting and data storage | Vetted cloud regions; where located outside the UK/EEA, UK IDTA / Standard Contractual Clauses |
| OpenAI, Inc. | AI model processing to generate agent responses and conversation translation in the agent inbox; engaged under business terms that prohibit training on customer data | USA; Standard Contractual Clauses |
| Meta Platforms (WhatsApp Business Cloud API) | WhatsApp message delivery under your own Meta Business account (BYOA) | EU / USA; Meta's own transfer mechanisms under your agreement with Meta |
| Shopify Inc. | eCommerce store data integration, at your direction and under your authorisation | USA / Canada; Shopify's own transfer mechanisms under your agreement with Shopify |
| Stripe, Inc. | Payment processing; holds billing contact information for your account | USA; PCI-DSS compliant; UK IDTA / Standard Contractual Clauses |
| Transactional email provider (name available on request) | Sending account notifications, billing receipts, system emails, and platform email on your behalf | EU / USA; Standard Contractual Clauses where applicable |
| Cloudflare, Inc. | Website delivery (CDN), DDoS protection, and DNS | USA / Global; Standard Contractual Clauses |
We require every sub-processor to enter into a written agreement with us imposing data protection obligations substantially equivalent to those in our DPA. Where a sub-processor is located outside the UK or EEA, we rely on the transfer mechanisms noted above or on an applicable adequacy decision. We may replace or add sub-processors from time to time; changes that affect your end-customers' personal data are notified in advance as described in Section 6 of the DPA, and this page is updated at the same time.
Questions
Data protection enquiries: support@astroxtech.com
ASTROX TECHNOLOGIES LTD (Company No. 16584933), registered in England and Wales; registered office address as recorded at Companies House.