Subprocessors - BlueNexus

Last Updated: 09.07.2026

Introduction

This page lists the third-party subprocessors that BlueNexus Tech Pty Ltd ("BlueNexus") engages to help deliver the BlueNexus platform and related services (the "Services").

A "subprocessor" is a third party engaged by BlueNexus that may process personal data on our behalf in the course of providing the Services. Where BlueNexus acts as a processor, these subprocessors process personal data only on documented instructions and under contractual terms consistent with our Data Processing Agreement and applicable data protection laws (including the GDPR, UK GDPR, the Australian Privacy Act, and U.S. state privacy laws).

BlueNexus is committed to engaging only subprocessors that provide sufficient guarantees to implement appropriate technical and organisational measures, and to maintaining transparency about who processes data on our behalf.

Updates and notifications

BlueNexus reviews and updates this list as the Services evolve. We may add or remove subprocessors with prior notice to customers in accordance with our Data Processing Agreement.

List of active subprocessors

Cloud Compute

Amazon Web Services

Amazon Web Services, Inc. · United States

S3, EC2, CloudWatch, SES and related AWS services - storage, routing and orchestration of platform workloads; observability and performance monitoring; transactional email delivery.

Data categories: Identity & contact dataAuthentication credentialsThird-party connector credentialsConnected-service & app metadataUser contentActivity logs & technical metadataBilling & usage dataSpecial category data (Art. 9 GDPR)
Processing locations: USEU
Data subjects: All end users

Anthropic

Anthropic PBC · United States

AI model inference: natural language processing, prompt completion, and model responses as directed by Customer via API.

Data categories: User contentConnected-service & app metadataIdentity & contact data
Processing locations: US
Data subjects: All end users

Baseten

Baseten Labs Inc. · United States

LLM API gateway and model routing - unified API access to multiple AI model providers for inference workloads.

Data categories: User contentConnected-service & app metadataIdentity & contact data
Processing locations: USEUAustralia
Data subjects: All end users

Black Forest Labs

Black Forest Labs Inc. · United States

AI image-generation model provider (FLUX). Text-to-image and image-editing inference: prompts and any reference images we submit to the BFL FLUX API to produce image outputs. Analogous to Baseten/OpenRouter/Redpill but inference-only (image gen), not a routing gateway.

Data categories: User contentIdentity & contact data
Processing locations: USEU
Data subjects: All end users

Google

Google LLC · United States

LLM inference provider - Google Gemini Developer API (Google AI Studio), used for text-to-speech (TTS) and speech-to-text (STT) voice features. Same outbound-content flow as Baseten / OpenRouter / Redpill (model inference), scoped to TTS/STT.

Data categories: User contentIdentity & contact dataConnected-service & app metadata
Processing locations: US
Data subjects: All end users

MongoDB Atlas

MongoDB, Inc. · United States

Managed MongoDB database hosting - primary application database for platform data.

Data categories: Identity & contact dataAuthentication credentialsThird-party connector credentialsConnected-service & app metadataUser contentActivity logs & technical metadataBilling & usage dataSpecial category data (Art. 9 GDPR)
Processing locations: USEU
Data subjects: All end users

OpenRouter

OpenRouter, Inc. · United States

LLM API gateway and model routing - unified API access to multiple AI model providers for inference workloads.

Data categories: User contentIdentity & contact dataConnected-service & app metadata
Processing locations: US
Data subjects: All end users

Redpill

Hashforest Technology, LLC · United States

Decentralized confidential AI inference on TEE GPU/CPU - TEE hardware, encrypted in-use compute, enclave execution.

Data categories: User contentIdentity & contact dataConnected-service & app metadata
Processing locations: USEU
Data subjects: All end users

Tavily

AlphaAI Technologies Inc. · United States

Web search and retrieval API for AI applications - search retrieval for AI workflows.

Data categories: User content
Processing locations: US
Data subjects: All end users

Together AI

Together Computer Inc. · United States

LLM inference provider - unified API access to hosted AI models for inference workloads (used identically to Baseten, Redpill and OpenRouter).

Data categories: User contentIdentity & contact dataConnected-service & app metadata
Processing locations: US
Data subjects: All end users

Authentication & Security

Thirdweb

Non-Fungible Labs, Inc. · United States

Wallet authentication and identity SDK - identity verification, login, abuse detection, fraud prevention.

Data categories: Identity & contact dataAuthentication credentials
Processing locations: US
Data subjects: All end users

Data Integration

Thryve

mHealth Pioneers GmbH · Germany

Health data aggregation - user-consented access to wearable and health data (Fitbit, Garmin, WHOOP, Apple Health, Oura, etc.) for use as input to LLM tool calls via the BlueNexus connector.

Data categories: Identity & contact dataThird-party connector credentialsSpecial category data (Art. 9 GDPR)
Processing locations: EU
Data subjects: All end users

Customer Support

Zendesk

Zendesk, Inc. · United States

Customer support ticketing - customer support ticketing and inbound communications.

Data categories: Identity & contact data
Processing locations: USEU
Data subjects: All end users

Email & Communications

Firebase

Google Australia Pty Ltd · Australia

Delivery and routing of push notifications to the BlueNexus mobile application on registered end-user devices (message queuing and delivery via Firebase Cloud Messaging). No other Firebase service is in use.

Data categories: User contentActivity logs & technical metadataConnected-service & app metadata
Processing locations: US
Data subjects: All end users

MailerLite

UAB MailerLite · Lithuania

Transactional and marketing email delivery - newsletters, marketing and lifecycle email.

Data categories: Identity & contact data
Processing locations: EUEEA
Data subjects: All end usersProspects

Webflow

Webflow, Inc. · United States

Marketing website hosting and form submissions - contact forms and lead capture from the marketing site.

Data categories: Identity & contact data
Processing locations: US
Data subjects: Website visitors

Zapier

Zapier, Inc. · United States

Workflow automation between services - automation workflows across internal SaaS tools.

Data categories: Identity & contact data
Processing locations: US
Data subjects: Website visitors

Analytics

Mixpanel

Mixpanel, Inc. · United States

Product analytics for the BlueNexus platform - feature usage, funnel analysis, retention and user behaviour tracking to inform product decisions.

Data categories: Identity & contact dataActivity logs & technical metadata
Processing locations: EU
Data subjects: All end users

Plausible

Plausible Insights OÜ · Estonia

Privacy-focused web analytics for the BlueNexus website. Anonymous aggregate visitor data, no cookies, no personal identifiers.

Data categories: Activity logs & technical metadata
Processing locations: EUEEA
Data subjects: Website visitors

Questions or objections

If you have questions about a subprocessor, or wish to raise a reasonable, good-faith objection to a new or existing subprocessor in accordance with the Data Processing Agreement, please contact us at privacy@bluenexus.ai.