Scope and notice
A subprocessor is a company we engage that may process personal data in the course of providing Axis. This page lists them, and it forms part of our Data Processing Addendum.
We give at least 30 days notice before adding or replacing a subprocessor. Business customers can subscribe to notifications by emailing legal@axismarketing.ai with the subject "subprocessor notifications".
Tools that never receive personal data are not listed here. Operating systems, programming frameworks and libraries that run on our own infrastructure are not subprocessors, because no data leaves our control to reach them.
Infrastructure and platform
| Subprocessor | What it does for us | Data it may process | Location |
|---|---|---|---|
| Supabase | Primary application database and authentication | Account, brand, content and usage data | United States |
| Vercel | Hosting and delivery of the application and website | Request metadata, IP address | United States, global edge |
| Cloudflare | DNS, content delivery, network security, object storage | Request metadata, IP address, stored media | United States, global edge |
| Railway | Backend service hosting | Application data in transit and processing | United States |
Payments
| Subprocessor | What it does for us | Data it may process | Location |
|---|---|---|---|
| Stripe | Payment processing, subscription billing, tax calculation | Name, email, billing address, country, payment method. Full card numbers go to Stripe directly and are never held by Axis. | United States, global |
Artificial intelligence
| Subprocessor | What it does for us | Data it may process | Location |
|---|---|---|---|
| Anthropic | Text generation, strategy and script writing | Prompts, brand settings and content submitted for generation | United States |
| Higgsfield | Image and video generation | Prompts and reference material submitted for generation | United States |
| fal.ai | Model routing for image and video generation | Prompts and reference material submitted for generation | United States |
Each AI provider is contractually restricted to using submitted content only to return a result to us. What Axis itself trains on is set out in the AI Terms, and it never includes data retrieved from your connected platform accounts.
Communications
| Subprocessor | What it does for us | Data it may process | Location |
|---|---|---|---|
| Resend | Transactional and marketing email delivery | Name, email address, message content, delivery and engagement events | United States |
| Brevo | Email and SMS or WhatsApp delivery | Name, email address, phone number, message content, consent records | European Union |
| ManyChat | Messaging automation and lead capture on connected channels | Contact identifiers and message content on connected channels | United States |
Business operations
| Subprocessor | What it does for us | Data it may process | Location |
|---|---|---|---|
| Google (Workspace) | Email, documents and internal collaboration | Any personal data contained in business correspondence | United States, global |
Platforms you connect
When you connect a social, advertising or analytics account, data flows between Axis and that platform at your direction. Those platforms are not our subprocessors. They are independent controllers of the data they hold, and their own terms and privacy policies govern it.
- Meta, covering Facebook and Instagram
- TikTok
- Google, covering Analytics and connected advertising accounts
You can disconnect any of them at any time, and we delete the data retrieved from a disconnected account within 30 days.