§ Legal · Sub-processors
Sub-processor list
Companion to the Data Processing Agreement. Carbynix engages the following sub-processors to provide the Services. Each is engaged under a written contract with data-protection terms.
| Sub-processor | Purpose | Data processed | Location | Notes |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure: compute, storage, database, the detection and analysis pipeline | Customer Data and security telemetry | US (us-east-1) | Primary hosting. |
| Stripe | Payment processing for subscriptions and add-ons | Billing and payment data (name, billing contact, payment method handled by Stripe) | US | Carbynix does not store full card data; Stripe is the processor of record for payments. |
| Cloudflare | DNS, CDN, and edge security for carbynix.com and the portal | Network/request metadata; limited personal data such as IP addresses | US/global edge | Proxies website and portal HTTP traffic; processes request metadata and IP addresses. |
| Keycloak (self-hosted) | Customer and user authentication (OIDC) for the portal | Authentication identifiers (usernames, emails, tokens) | US (self-hosted on AWS) | Self-hosted by Carbynix on AWS; covered by the AWS entry, not a separate third party. |
| Anthropic (Claude / via Amazon Bedrock) | AI-assisted detection reasoning and analysis | Security telemetry relevant to a detection | US | Processed via Amazon Bedrock and remains within AWS; customer data is not used to train models. |