Overview
This page lists the third-party sub-processors that Exicube App Solutions (OPC) Private Limited uses to provide the Exicube platform services. Each sub-processor is authorised to process data only for the specific purposes described below and is bound by data processing agreements.
If you are a B2B client acting as Data Controller, you authorise Exicube to use these sub-processors as part of the Data Processing Agreement. We will notify affected clients via email at least 30 days before adding a new sub-processor.
Infrastructure & Hosting
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Hetzner | Cloud server hosting (primary) | All platform data | Germany / Finland |
| Amazon Web Services (AWS) | Cloud hosting (select clients) | Platform data | Various (region-specific) |
Payment Processing
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing, subscription billing, Connect payouts | Payment card data, billing information | United States |
| Square | Payment processing, payout destinations | Payment card data, billing information | United States |
AI & Machine Learning
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS Bedrock) | LLM inference — the only inference provider. Powers Reports Agent, Support Triage, Business Health Score, and Customer Insights. Requests are routed through Exicube's own gateway, which adds no further processor. | Operational and support data required to generate the requested output. Not used to train provider models, and not retained by the provider. | Sweden (eu-north-1) |
Note: For platform AI features (support, analytics, dispatch), Personal Identifiable Information (PII) such as names, phone numbers, email addresses, and IP addresses is automatically stripped before data is sent to the AI inference provider. The provider listed above is contractually prohibited from using input data for model training.
Communications
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Expo (Expo Push Service) | Delivery of push notifications to the customer and driver apps | Device push tokens, notification content | United States |
| LiveKit | WebRTC voice/video calling (self-hosted server) | Call metadata, voice/video streams (transient) | Self-hosted |
| 3CX | Masked phone calling (PSTN) | Phone numbers (masked), call metadata | Various |
Mapping & Location
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| OpenStreetMap (Nominatim) | Geocoding (default) | Address queries, coordinates | Various (open-source) |
| OSRM | Route calculation (self-hosted) | Coordinates for routing | Self-hosted |
| Open-Meteo | Weather data for surge pricing | GPS coordinates (latitude/longitude) | Germany (open-source) |
| Google Maps (optional) | Geocoding, routing, map rendering (if client opts in) | Address queries, coordinates, map interactions | United States |
Changes to This List
We will notify B2B clients via email at least 30 days before engaging a new sub-processor. If you object to a new sub-processor, you may terminate your subscription as per our Terms and Conditions.
For questions about our sub-processors, contact us at: [email protected]
Exicube App Solutions (OPC) Private Limited
3, Sreenagar, Madhyamgram
Kolkata, West Bengal – 700129
India
Version History
| Date | Changes |
|---|---|
| 30 September 2026 | Contact email updated to [email protected]. |
| 20 September 2026 | List updated to the current providers. |
| 25 March 2026 | Initial version. |