# Subprocessors

Providers that process customer personal data for Elios.

Last updated October 22, 2026\
<https://elios.ai/legal/subprocessors>

---

Elios uses the providers listed below to process personal data on customers’ behalf in supplying the Services. This list forms part of the [Data Processing Addendum](https://elios.ai/legal/dpa) where applicable.

## Current list

Every provider below is authorized under written processing terms.

| Legal entity                  | Purpose                                                             | Affected Services or features | Data processed                                                                                                        | Processing locations                 | Effective date   |
| ----------------------------- | ------------------------------------------------------------------- | ----------------------------- | --------------------------------------------------------------------------------------------------------------------- | ------------------------------------ | ---------------- |
| Hetzner Online GmbH           | Hosting, storage and backups                                        | Computer; Phone call servers  | Customer Content in computers, disks and templates; call signaling and live audio                                     | Germany and Finland (European Union) | October 22, 2026 |
| Amazon Web Services, Inc.     | Hosting                                                             | Phone call servers            | Call signaling and live audio                                                                                         | United States                        | October 22, 2026 |
| Bulk Solutions, LLC (BulkVS)  | Carrier service for phone numbers, calls and messages               | Phone                         | Phone numbers, call audio, message content and attachments, and carrier registration information                      | United States                        | October 22, 2026 |
| Cloudflare, Inc.              | Website and console delivery, DNS, edge security and bot protection | All Services                  | Data in transit to and from the Services, IP addresses and request metadata                                           | Global network                       | October 22, 2026 |
| WorkOS, Inc.                  | Console sign-in, organizations, invitations and API key management  | Console and API               | Names and email addresses of Customer’s users, organization membership and roles, API key metadata and sign-in events | United States                        | October 22, 2026 |
| Stripe, Inc.                  | Payment processing                                                  | Billing                       | Billing contacts and payment details                                                                                  | United States                        | October 22, 2026 |
| Metronome, Inc.               | Usage metering, credits and invoicing                               | Billing                       | Account identifiers, usage records and billing contacts                                                               | United States                        | October 22, 2026 |
| Plus Five Five, Inc. (Resend) | Transactional email                                                 | All Services                  | Recipient email addresses and email content                                                                           | United States                        | October 22, 2026 |
| Google LLC (Google Workspace) | Company email and correspondence                                    | Support                       | Messages and attachments sent to Elios                                                                                | United States                        | October 22, 2026 |
| PostHog, Inc.                 | Product analytics, EU Cloud                                         | Console                       | Console usage events and, with the user’s consent, session recordings                                                 | Germany (European Union)             | October 22, 2026 |

No Elios affiliates act as subprocessors, and no AI model provider processes Customer Content for Elios.

## Updates and objections

We give at least 60 days’ prior notice of proposed additions or replacements in accordance with the Data Processing Addendum. Customers may object on reasonable data protection grounds within 60 days of the notice, as described there. Notices are sent through this page and by email to the account’s administrative email address. To receive notices, keep that address current.

Questions or objections can be sent to <privacy@elios.ai>. State your organization, the proposed provider and the data protection concern so we can address it.

## Other third parties

Some recipients act for their own purposes or are engaged directly by customers. These are not necessarily Elios subprocessors. Examples can include a customer-selected integration or a carrier acting under its own legal duties. Their role must be assessed for the particular processing.

The [Privacy Policy](https://elios.ai/legal/privacy) explains disclosures of information Elios processes as an independent controller. This page is not a list of every vendor used by Elios.

## Change history

| Date             | Change                | Affected Services | Date notice sent         | Effective date   |
| ---------------- | --------------------- | ----------------- | ------------------------ | ---------------- |
| October 22, 2026 | Initial verified list | All Services      | Published with this list | October 22, 2026 |