Legal
Sub-processors
Last updated June 22, 2026. Axovern uses the providers below to deliver the hosted platform and public website. Enterprise customers may subscribe to change notifications.
A sub processor is a third party that processes personal data on Axovern's behalf to run the service for example cloud hosting or transactional email. This list covers Axovern's own infrastructure providers, not tools your organization connects directly.
Current sub processors
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Cloud hosting, storage, and compute for the hosted platform (workspace data in United States or Canada per customer region) | United States and/or Canada |
| Cloudflare | DNS, content delivery, and website security for axovern.com | United States / Global |
| Twilio SendGrid | Transactional email (account notices, password reset, platform notifications) | United States |
| Anthropic | Optional AI assisted features when enabled by a workspace administrator | United States |
| Optional workspace sign in (Google SSO) when provisioned for a customer | Global | |
| Microsoft | Optional workspace sign in (Microsoft SSO) when provisioned for a customer | Global |
We evaluate sub processors for security and privacy practices before use and when we materially change how we rely on them. Provider privacy policies and security documentation are available from each vendor's website.
Workspace data regions
When a hosted workspace is provisioned, Axovern stores primary customer workspace data in one of two AWS regions:
- United States, US West (Oregon)
- Canada, Canada Central (Montreal)
This includes controls, evidence, audit logs, integration OAuth tokens, questionnaires, and related program content. The region is selected at workspace creation and is not changed without a migration project.
Sub processors in the table above may still process data in other locations when you use optional features (for example AI, email, or SSO). Marketing pages and static web assets may be delivered globally via CDN and are not customer workspace data.
Customer integrations
Integrations you configure in your workspace: such as GitHub, Okta, AWS, Microsoft 365, or other vendor APIs: connect under your agreements with those vendors. They are generally not Axovern sub processors unless we proxy their data through our infrastructure in a way that makes us responsible for that processing.
If you need a data flow diagram for a specific integration, contact us during your security review.
Changes & notifications
We update this page when we add or replace a sub processor that processes personal data on our behalf. The “Last updated” date at the top reflects the most recent change.
Enterprise customers with a DPA may subscribe to email notification of sub processor changes. Contact [email protected] to register.
Contact
Questions about this list or data processing: [email protected]
Related: Privacy policy · Security · Terms
FAQ
Common questions
Who are Axovern sub processors?
Primary infrastructure providers include AWS for hosting and storage, SendGrid for transactional email, and optional AI providers when customers enable Axo features.
Will Axovern notify customers of sub processor changes?
Enterprise agreements can include change notification. This page lists current sub processors used for the hosted platform.
Need change notifications?
Enterprise customers can subscribe to sub processor updates. Contact us to set that up.