Subprocessors - BlueNexus

Last Updated: 15.05.2026

Introduction

This page lists the third-party subprocessors that BlueNexus Tech Pty Ltd ("BlueNexus") engages to help deliver the BlueNexus platform and related services (the "Services").

A "subprocessor" is a third party engaged by BlueNexus that may process personal data on our behalf in the course of providing the Services. Where BlueNexus acts as a processor, these subprocessors process personal data only on documented instructions and under contractual terms consistent with our Data Processing Agreement and applicable data protection laws (including the GDPR, UK GDPR, the Australian Privacy Act, and U.S. state privacy laws).

BlueNexus is committed to engaging only subprocessors that provide sufficient guarantees to implement appropriate technical and organisational measures, and to maintaining transparency about who processes data on our behalf.

Updates and notifications

BlueNexus reviews and updates this list as the Services evolve. We may add or remove subprocessors with prior notice to customers in accordance with our Data Processing Agreement.

List of active subprocessors

Confidential Compute

Phala Cloud

Hashforest Technology, LLC · United States

Phala Cloud TEE platform - TEE hardware, encrypted in-use compute, enclave execution; observability and event logging.

Data categories: Identity & contact dataAuthentication credentialsThird-party connector credentialsConnected-service & app metadataUser contentActivity logs & technical metadataBilling & usage dataSpecial category data (Art. 9 GDPR)
Processing locations: USEU
Data subjects: All end users

Redpill

Hashforest Technology, LLC · United States

Decentralized confidential AI inference on TEE GPU/CPU - TEE hardware, encrypted in-use compute, enclave execution.

Data categories: User content
Processing locations: USEU
Data subjects: All end users

Cloud Compute

Amazon Web Services

Amazon Web Services, Inc. · United States

S3, EC2, CloudWatch, SES and related AWS services - storage, routing and orchestration of platform workloads; observability and performance monitoring; transactional email delivery.

Data categories: Identity & contact dataAuthentication credentialsThird-party connector credentialsConnected-service & app metadataUser contentActivity logs & technical metadataBilling & usage data
Processing locations: USEU
Data subjects: All end users

MongoDB Atlas

MongoDB, Inc. · United States

Managed MongoDB database hosting - primary application database for platform data.

Data categories: Identity & contact dataAuthentication credentialsThird-party connector credentialsConnected-service & app metadataUser contentActivity logs & technical metadataBilling & usage dataSpecial category data (Art. 9 GDPR)
Processing locations: USEU
Data subjects: All end users

OpenRouter

OpenRouter, Inc. · United States

LLM API gateway and model routing - unified API access to multiple AI model providers for inference workloads.

Data categories: User content
Processing locations: US
Data subjects: All end users

Tavily

AlphaAI Technologies Inc. · United States

Web search and retrieval API for AI applications - search retrieval for AI workflows.

Data categories: User content
Processing locations: US
Data subjects: All end users

Authentication & Security

Thirdweb

Non-Fungible Labs, Inc. · United States

Wallet authentication and identity SDK - identity verification, login, abuse detection, fraud prevention.

Data categories: Identity & contact dataAuthentication credentials
Processing locations: US
Data subjects: All end users

Data Integration

Thryve

mHealth Pioneers GmbH · Germany

Health data aggregation - user-consented access to wearable and health data (Fitbit, Garmin, WHOOP, Apple Health, Oura, etc.) for use as input to LLM tool calls via the BlueNexus connector.

Data categories: Identity & contact dataThird-party connector credentialsSpecial category data (Art. 9 GDPR)
Processing locations: EU
Data subjects: All end users

Customer Support

Zendesk

Zendesk, Inc. · United States

Customer support ticketing and inbound communications.

Data categories: Identity & contact data
Processing locations: USEU
Data subjects: All end users

Email & Communications

MailerLite

UAB MailerLite · Lithuania

Transactional and marketing email delivery - newsletters, marketing and lifecycle email.

Data categories: Identity & contact data
Processing locations: EUEEA
Data subjects: All end usersProspects

Webflow

Webflow, Inc. · United States

Marketing website hosting and form submissions - contact forms and lead capture from the marketing site.

Data categories: Identity & contact data
Processing locations: US
Data subjects: Website visitors

Zapier

Zapier, Inc. · United States

Workflow automation between services - automation workflows across internal SaaS tools.

Data categories: Identity & contact data
Processing locations: US

Analytics

Plausible

Plausible Insights OÜ · Estonia

Privacy-focused web analytics for the BlueNexus website - anonymous aggregate visitor data, no cookies, no personal identifiers.

Data categories: Activity logs & technical metadata
Processing locations: EUEEA
Data subjects: Website visitors

Questions or objections

If you have questions about a subprocessor, or wish to raise a reasonable, good-faith objection to a new or existing subprocessor in accordance with the Data Processing Agreement, please contact us at privacy@bluenexus.ai.