Overview
This page lists the third-party sub-processors that Exicube App Solutions (OPC) Private Limited uses to provide the Exicube platform services. Each sub-processor is authorised to process data only for the specific purposes described below and is bound by data processing agreements.
If you are a B2B client acting as Data Controller, you authorise Exicube to use these sub-processors as part of the Data Processing Agreement. We will notify affected clients via email at least 30 days before adding a new sub-processor.
Infrastructure & Hosting
| Provider | Purpose | Data Processed | Location |
|---|
| Hetzner | Cloud server hosting (primary) | All platform data (encrypted at rest) | Germany / Finland |
| Amazon Web Services (AWS) | Cloud hosting (select clients), S3 file storage | Platform data, uploaded files/images | Various (region-specific) |
| DigitalOcean | Cloud hosting (select clients), Spaces object storage | Platform data, uploaded files/images | Various (region-specific) |
Payment Processing
| Provider | Purpose | Data Processed | Location |
|---|
| Stripe | Payment processing, subscription billing, Connect payouts | Payment card data, billing information | United States |
| Square | Payment processing, payout destinations | Payment card data, billing information | United States |
| PayPal | Payment processing | Payment and billing information | United States |
AI & Machine Learning
| Provider | Purpose | Data Processed | Location |
|---|
| Groq (Qwen3) | LLM inference (primary) — powers Reports Agent, Support Triage, Business Health Score, and Customer Insights | Anonymised queries (PII stripped) | United States |
| Google (Gemini Flash) | LLM inference (fallback) — activated automatically if primary provider is unavailable | Anonymised queries (PII stripped) | United States |
Note: For platform AI features (support, analytics, dispatch), Personal Identifiable Information (PII) such as names, phone numbers, and email addresses is automatically stripped before data is sent to AI inference providers. For Exicube's own CRM outreach activities, business contact names may be included in prompts where essential for personalisation; this is conducted under legitimate interest (GDPR Article 6(1)(f)). All providers listed above are contractually prohibited from using input data for model training.
Communications
| Provider | Purpose | Data Processed | Location |
|---|
| Twilio | SMS delivery (OTP, notifications) | Phone numbers, message content | United States |
| SendGrid | Transactional email delivery | Email addresses, email content | United States |
| LiveKit | WebRTC voice/video calling | Call metadata, voice/video streams (transient) | United States |
| 3CX | Masked phone calling (PSTN) | Phone numbers (masked), call metadata | Various |
Mapping & Location
| Provider | Purpose | Data Processed | Location |
|---|
| OpenStreetMap (Nominatim) | Geocoding (default) | Address queries, coordinates | Various (open-source) |
| OSRM | Route calculation (self-hosted) | Coordinates for routing | Self-hosted |
| Open-Meteo | Weather data for surge pricing | GPS coordinates (latitude/longitude) | Germany (open-source) |
| Google Maps (optional) | Geocoding, routing, map rendering (if client opts in) | Address queries, coordinates, map interactions | United States |
Analytics
| Provider | Purpose | Data Processed | Location |
|---|
| Google Analytics | Website usage analytics (exicube.com only, consent-gated) | Page views, device info, anonymised IP | United States |
Changes to This List
We will notify B2B clients via email at least 30 days before engaging a new sub-processor. If you object to a new sub-processor, you may terminate your subscription as per our Terms and Conditions.
For questions about our sub-processors, contact us at: [email protected]
Exicube App Solutions (OPC) Private Limited
3, Sreenagar, Madhyamgram
Kolkata, West Bengal – 700129
India
Version History
| Date | Changes |
|---|
| 16 May 2026 | Updated AI providers: replaced OpenAI (GPT-4o) with Groq (Qwen3) as primary LLM inference and Google (Gemini Flash) as fallback. |
| 25 March 2026 | Initial sub-processor list. Infrastructure (Hetzner, AWS, DigitalOcean), payments (Stripe, Square, PayPal), communications (Twilio, SendGrid, LiveKit, 3CX), mapping (OSM, OSRM, Open-Meteo, Google Maps optional), AI (OpenAI), analytics (Google Analytics). |