Service policy · Last updated 2026-09-27
Subprocessors
This page lists the third-party service providers (subprocessors) that Hubzoid engages to process personal data on its behalf, with the purpose and location of each. It also explains which providers are selected and contracted by customers themselves. It is the list of Subprocessors referred to in the Data Processing Addendum at /legal/dpa.
Section 01
How this list applies
The providers listed here process personal data on our behalf when we operate hubzoid.com, communicate with visitors and customers, maintain the open-source project and provide implementation services.
Self-hosted deployments of the Hubzoid software do not involve Hubzoid or these providers. Organizations that run Hubzoid on their own infrastructure choose their own model providers, hosting and connected services.
Implementation services are carried out in the customer's own environment, using providers that the customer selects, as described in Providers selected by customers.
Section 02
Website and communications
Netlify, Inc. Purpose: hosting and delivery of hubzoid.com, including processing of page requests. Location: United States.
Google LLC. Purpose: Google Analytics website analytics, used only with the visitor's consent. Location: United States.
PostHog, Inc. Purpose: product analytics and session replay on hubzoid.com, used only with the visitor's consent. Data is hosted in PostHog's US cloud. Location: United States.
Resend. Purpose: delivery of project request form submissions to the Hubzoid team by email. Location: United States.
Section 03
Open-source project
GitHub, Inc. Purpose: hosting of the Hubzoid source code, releases and container images, issue tracking and private vulnerability reports. Location: United States.
Section 04
Business operations
Business email and document collaboration provider. Purpose: hosts the Hubzoid team's email, including the mailbox that receives project requests and messages sent to contact@hubzoid.com, and the documents the team uses to run the business. Customer Personal Data from implementation services is not stored in these services.
Section 05
Providers selected by customers
Model providers. In implementation services, the customer selects and contracts directly with the model providers its agents use, such as Anthropic, OpenAI or Google. Prompts and outputs are processed under the customer's agreement with that provider, in the regions and under the data retention and training terms that agreement sets.
Cloud and infrastructure providers. The customer's Hub is deployed in infrastructure the customer controls, such as its own account with Amazon Web Services, Google Cloud or Microsoft Azure. The customer holds the contract with that provider.
Connected services. Business systems that the customer connects to its agents are used under the customer's own agreements with those providers.
Because the customer selects and contracts with these providers, they are not Hubzoid subprocessors. For self-hosted deployments, organizations likewise choose their own model providers and infrastructure.
Section 06
Changes to this list
We update this page when we add or replace a subprocessor and change the date at the top. For customers with an active implementation services agreement, we give at least 30 days' notice by email before a new subprocessor begins processing Customer Personal Data. Customers may object as described in the Data Processing Addendum at /legal/dpa.