Who else touches your data
APODEXA uses a small set of third-party providers to run the service. Each is listed below with what it does and what data it sees. This list is kept in sync with the Privacy Policy.
Last reviewed 2026-07-14
| Sub-processor | Role | Data it touches | Location |
|---|---|---|---|
| Amazon Web Services (AWS) incl. SES for transactional email |
Hosting, storage and compute for the whole service; sends transactional email (verification, password reset, receipts) via SES. | All service data — your account, uploaded files, processing results and run history; recipient email address and message content for transactional mail. | Tokyo, Japan (ap-northeast-1) |
| Stripe | Subscription billing and payment processing. | Billing and contact details and subscription status. Card numbers go directly to Stripe and never reach APODEXA's servers. | United States |
| Google (OAuth Sign-In) | Optional "Sign in with Google" authentication. | Your email address, name and Google account identifier — only if you choose Google Sign-In. We never receive your Google password. | United States |
| Google Analytics (GA4) | Traffic analytics on public marketing pages only. Runs under Consent Mode with analytics denied by default until you accept; the signed-in dashboard is not analytics-tracked. | Pseudonymous usage data (page views, approximate location, device/browser) from marketing-page visitors who accept analytics. | United States |
Change notice. We aim to give at least 30 days' notice on this page before adding or replacing a sub-processor that handles customer data, so you have a chance to review the change. Data is hosted in AWS Tokyo; some sub-processors (Stripe, Google) are US-based, which may involve an international transfer as described in the Privacy Policy.
More on how we handle data
See the security controls we have in place, or the full privacy policy.