Sub-processors
Last updated: September 2026
These companies process personal data so we can run the AXTO cloud apps. Each only receives what its task needs. Payment providers are used only when you choose them at checkout.
| Sub-processor | Purpose | Data | Location | Used |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting, database (D1), encrypted file storage (R2), caching and network security | Account data, encrypted saved work, operational logs | Global edge network | Always |
| Resend, Inc. | Transactional e-mail (sign-in, receipts, reminders, support replies) | E-mail address, name, message content | United States | Always |
| Stripe, Inc. | Card payments | Name, e-mail, payment details (held by Stripe) | United States / global | Only if you pay by card through Stripe |
| PayPal Holdings, Inc. | PayPal payments | Name, e-mail, payment details (held by PayPal) | Global | Only if you pay with PayPal |
| PT Xendit Teknologi Indonesia | Indonesian payments (QRIS, virtual account, e-wallet) and credit / debit cards | Name, e-mail, payment details (card data is held by Xendit, never by AXTO) | Indonesia | Only if you pay with Xendit or by card through Xendit |
| PT Midtrans | Indonesian payments and credit / debit cards | Name, e-mail, payment details (card data is held by Midtrans, never by AXTO) | Indonesia | Only if you pay with Midtrans or by card through Midtrans |
| NOWPayments | Crypto payments | Order reference, amount, wallet transaction | Global | Only if you pay with NOWPayments |
🔑 Your AI provider is yours
Apps run on your own AI key (BYOX). Requests go straight to the provider you chose — Anthropic, OpenAI, Google, Groq, your own server… — under your agreement with them. They are not our sub-processors, and we send your content to no other AI provider.
🖥️ Self-hosted means none of these
Self-hosted editions keep all data on your infrastructure; with a Lifetime licence they never contact axto.io at all.
We update this page before adding or replacing a sub-processor. Questions or objections: hello@axto.io. See also the DPA.