Skip to content
Apex
Legal · Updated April 2026

Sub-processors

Every third-party processor in our infrastructure, by data category and region. Updated quarterly with 30-day advance notice on changes.

What this page is

Apex uses a small set of vetted sub-processors to operate the Aether platform. The list below names every third party that may process customer data on our behalf. We update this list quarterly and provide 30-day advance notice to customers on additions or changes affecting data category or region.

How to subscribe to changes

Email trust@apexworldlabs.com with the subject 'Sub-processor change notifications.' We will add you to a notification list that receives an email at least 30 days before any change goes live.

Infrastructure

  • Amazon Web Services (AWS), Inc. — primary cloud infrastructure, US-East / US-West / EU regions. Customer content + audit traces.
  • Google Cloud Platform (GCP), Inc. — secondary cloud + customer-cloud option, multi-region. Customer content + audit traces.
  • Cloudflare, Inc. — DNS, CDN and WAF for apexworldlabs.com and platform.apexworldlabs.com. Connection metadata only.
  • Fastly, Inc. — edge caching for static assets. No customer content.

Identity + access

  • Okta, Inc. — SSO and SCIM provisioning. Account metadata; no customer content.
  • WorkOS, Inc. — SSO connector layer. Account metadata; no customer content.
  • Stytch, Inc. — passwordless authentication on self-service tiers. Authentication tokens only.

Observability

  • Datadog, Inc. — operational metrics and logs. Customer content excluded by ingest filter.
  • Sentry, Inc. — error reporting. Customer content excluded; only stack traces and request envelopes.
  • Grafana Labs — internal dashboards. Aggregated metrics only; no customer content.

Billing + finance

  • Stripe, Inc. — payment processing for self-service tiers. Billing data only; no customer content.
  • Maxio (formerly Chargify) — usage-based billing reconciliation. Aggregated usage metrics only.

Customer support + communications

  • Front App, Inc. — support inbox. Customer-sent email content.
  • Resend, Inc. — transactional email and newsletter delivery. Recipient address + email body.
  • Linear, Inc. — internal issue tracking. No customer content; engineering metadata only.

How to object to a sub-processor

Enterprise customers may object in writing to any sub-processor we add. We will work with you to find an alternative, or, if not possible, you may terminate the affected service line under your MSA without penalty.

Out of scope

Sub-processors that handle only Apex's own internal data (e.g., payroll, HR, internal email) are not listed here, as they do not process customer content. A full corporate-vendor list is available under NDA.