Subprocessors

IngestX uses third-party providers selectively to operate and support its services.

Public summary

The exact provider set can vary by product scope, deployment model, region, support arrangement, and customer-specific implementation.

Inclusion below confirms only that an integration is visible in the repository. It does not establish that a provider is enabled in production, acts as a Sub-Processor for every customer, or applies to every deployment.

Before relying on this register for procurement or contracting, the open TODOs must be reconciled against the approved production configuration and applicable customer agreement.

Public provider register

The following named services are visible in the repository and may process the listed data when the relevant feature is enabled. Processing regions are intentionally left as TODOs where the repository does not establish a deployment-applicable fact.

A provider’s presence in the codebase does not mean it is enabled for every customer. The order form or Data Processing Addendum controls where a customer-specific commitment is required.

TODOs requiring Immenzo confirmation

• Confirm which listed providers are enabled in each production deployment.
• Confirm each provider’s legal role, approved data classes, retention settings, and applicable processing regions.
• Confirm the transfer mechanism and any customer-specific residency restriction before restricted data is processed.
• Confirm the public owner, review date, and customer change-notification process for this register.
• Replace each TODO only with evidence validated by Immenzo’s privacy and security owners.

Provider categories that may be involved

• cloud hosting and storage;
• document or file processing infrastructure;
• AI or OCR inference services;
• transactional email delivery;
• authentication and account security tooling;
• monitoring and reliability services;
• customer support tooling; and
• payment or billing services for commercial operations.

What customers can request

Customers and prospective customers may request the current applicable vendor and subprocessor information during formal legal, procurement, or security review. A current list can be provided under NDA where appropriate, including:

• service function;
• processing location or region, where relevant;
• general category of data involved;
• contractual data-processing restrictions; and
• the path for reviewing future changes where this is handled by contract.

Request path

For legal or procurement review, contact [email protected].

For security-focused diligence questions, contact [email protected].

Important note

Any commitment about prior approval, advance notice, region restrictions, or Indonesia-only processing should be confirmed in the applicable customer agreement, order form, or implementation scope.