Home Privacy Terms Sub-processors DPA Cookies Trust Center
Legal

Sub-processors

Last Updated: 7 August 2026  ·  Version: 1.0

Overview

A sub-processor is a third-party service provider we engage to help deliver our products and services, including our flagship platform and any other current or future service we operate (the "Services"). Sub-processors may process personal data on our behalf, strictly under our instructions and subject to a written data processing agreement requiring confidentiality and appropriate security measures, consistent with our Data Processing Addendum.

The table below lists our current customer-facing sub-processors. In addition to these, we rely on industry-standard cloud infrastructure providers for hosting, storage, and content delivery. We do not name individual infrastructure vendors in this list, but their engagement is governed by the same contractual and security standards described in our Trust Center.

Current Sub-processors

NamePurposeLocationData Transfer Mechanism
Stripe, Inc.Payment processingUnited StatesStandard Contractual Clauses
Resend, Inc.Transactional email delivery (invitations, password resets, notifications)United StatesStandard Contractual Clauses
Intelligent Document Processing ProviderAutomated data recognition and classification servicesUnited StatesStandard Contractual Clauses
Cloud infrastructure providersHosting, storage, and content delivery for the ServicesPrimary hosting region: Australia, with supporting regions as required for reliabilityStandard Contractual Clauses and equivalent safeguards

Notice of Changes

We will provide at least 30 days' notice before appointing a new sub-processor that will process Customer-Submitted Data, by email to the primary contact on each account and by updating this page. We recommend checking this page periodically for the most current list.

Objecting to a New Sub-processor

If you have a reasonable data protection concern about a newly appointed sub-processor, you may object by contacting admin@axiomadvisory.org within 30 days of the notice. We will work with you in good faith to address the concern, which may include providing additional information about the sub-processor's safeguards. If we cannot resolve the objection, you may terminate the affected Service in accordance with our Terms of Service.