Service Providers and Subprocessors
Effective Date: July 14, 2026
Current Providers
| Provider | Primary location | Relationship | Purpose | Data involved |
|---|---|---|---|---|
| KS LUX GROUP, Inc. | United States | Processor / service provider | Contracted product engineering, infrastructure operations, security, maintenance, and customer support. | Account identifiers, device and Spire metadata, diagnostics, support content, and Managed Spire data when access is necessary. |
| DigitalOcean, LLC | United States; selected hosting regions | Processor / infrastructure provider | Hosting for the Octron account and authorization service, database, operational logs, and encrypted disaster-recovery backups. | Account, identity, session, registered-client and Spire references, entitlement, security, support, and operational data. |
| Cloudflare, Inc. | Global network; United States | Processor / security provider | DNS, traffic proxying, content delivery, web-application security, abuse prevention, and Turnstile bot checks. | IP address, request and browser metadata, security signals, cookies, and data transmitted through protected endpoints. |
| Vercel Inc. | United States; global edge network | Processor / website hosting provider | Hosting and delivery of the Octron website and public account pages. | IP address, request and browser metadata, security logs, and data submitted through hosted website pages. |
| Resend, Inc. | United States | Processor / communications provider | Transactional account, verification, security, and service email. | Name, email address, message content, delivery status, and related metadata. |
| Apple Inc. | United States; global infrastructure | Platform provider; independent controller in some contexts | Optional Sign in with Apple, application distribution, APNs notifications, and Live Activities. | Apple account identifier, name or relay email when provided, device and push tokens, notification payloads, and store transaction metadata. |
| Google LLC | United States; global infrastructure | Identity provider; independent controller | Optional Google account sign-in. | Google account identifier, verified email, basic profile information, and authentication metadata. |
| GitHub, Inc. | United States; global infrastructure | Identity provider; independent controller | Optional GitHub account sign-in. | GitHub account identifier, username, verified email, basic profile information, and authentication metadata. |
User-Directed AI and Developer Services
AI agents, model providers, repositories, MCP servers, and developer services that you install, authorize, or access using your own account are selected and directed by you. Examples may include Anthropic, OpenAI, xAI, Google AI, GitHub Copilot, and other compatible services. They are not Octron subprocessors merely because Octron helps you operate their software. Their own terms and privacy policies govern the data you send to them.
Managed Spire Infrastructure
Managed Spire infrastructure is not included in the current-provider table until that service is offered and the relevant provider is enabled to process customer data. Before processing begins, we will identify the provider here and in applicable plan, checkout, contract, or subprocessor notices.
Access Controls
Providers receive only the categories of data reasonably needed for their functions. QUATTROBIT uses contractual, organizational, and technical measures appropriate to the relationship, including data processing terms, confidentiality obligations, access controls, and incident-notification requirements. Access by KS LUX GROUP, Inc. personnel is limited to authorized engineering, operations, security, maintenance, and support work.
Changes to This List
We may update this list when a provider is added, removed, or changes function. The effective date above identifies the current version. Where a contract or applicable law requires advance notice of a new subprocessor, we will provide that notice through the applicable account, contract, or contact channel. A business customer's objection and termination rights, if any, are governed by its written data-processing agreement with QUATTROBIT.
Contact
Questions about a provider or international transfer may be sent to support@octron.ai.