Sub-processors
Last updated: September 26, 2026
These are the third parties that WEDO4U LTD (QubeHub) uses to process personal data contained in customers’ platform data. Each is bound by data-protection terms at least as protective as our Data Processing Addendum. None of them may use customer data to train AI models.
We give customers at least 30 days’ notice before adding or replacing a sub-processor. Customers can object during that period.
| Sub-processor | Purpose | Location of processing | Transfer safeguard |
|---|---|---|---|
| DigitalOcean, LLC | Primary hosting; each customer’s dedicated database instance | Germany (EU) | n/a (EU) |
| Amazon Web Services EMEA SARL | Supporting cloud infrastructure | EU region | n/a (EU) |
| Cloudflare, Inc. | DNS, content delivery, network security | Global edge network | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Google (Google Cloud EMEA / Google LLC) | Supporting cloud and analytics services | EU / United States | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Meta Platforms Ireland Ltd | WhatsApp, Instagram and Facebook messaging channels, when a customer enables them | EU / United States | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Stripe Payments Europe, Ltd | Payment processing for subscriptions | EU / United States | EU–US Data Privacy Framework; Standard Contractual Clauses |
| OpenAI, L.L.C. / OpenAI Ireland Ltd | AI inference; knowledge-base retrieval (vector store) | United States | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Anthropic, PBC / Anthropic Ireland Ltd | AI inference | United States | EU–US Data Privacy Framework; Standard Contractual Clauses |
AI providers. Inputs sent for inference are not used for training. They are kept by the provider for no more than 30 days, for service delivery and abuse monitoring only, or not at all where zero-data-retention applies to our account. Knowledge-base materials stay in the retrieval index until the customer removes them, or until they are deleted after the subscription ends.
Not sub-processors. Services that a customer connects and directs are not our sub-processors. These include the customer’s own messaging accounts (for example Telegram), telephony (for example CallGear), SMS carriers, e-signature providers, and the customer’s existing CRM or database during migration.
To be notified of changes, email [email protected] with the subject “Sub-processor updates”.