Subprocessors
3cubed.ai engages a small number of third-party subprocessors to help deliver products we build and host on behalf of our clients. This page lists those subprocessors so that our clients can satisfy their own transparency, regulatory, and customer-disclosure obligations.
A subprocessor is a third party that processes client or end-user data on our behalf. Vendors that 3cubed.ai uses for purely internal purposes, and that do not process client or end-user data, are not listed here.
Current list
Current Subprocessors
These vendors may process client or end-user data as part of products that 3cubed.ai builds, operates, or supports for clients.
| Subprocessor | Service Provided | Data Categories Processed | Region |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud infrastructure, including compute, storage, networking, managed databases, and BigQuery, that hosts client products. | All data within the hosted product, as configured per client. | U.S. multi-region by default; configurable per client. |
| Google Workspace (Google LLC) | Email, calendar, document collaboration, and identity (SSO) for the 3cubed.ai workforce. May incidentally process client communications sent to 3cubed.ai personnel. | Business-contact details and operational communications related to client engagements. | U.S. |
| GitHub (GitHub, Inc., a Microsoft subsidiary) | Source-code hosting and CI/CD coordination for product code that 3cubed.ai builds and operates. | Source code only. No client end-user data is stored in GitHub. | U.S. |
| Vanta (Vanta, Inc.) | Continuous compliance monitoring, control attestation, and audit support. | Configuration metadata, security-control results, and limited employee directory information, including name, role, and email. No client end-user content. | U.S. |
Transparency
Vendors used internally — not subprocessors
The following vendor supports 3cubed.ai's internal operations but does not process client or end-user content. It is listed here for transparency.
- Stripe — billing and invoicing for 3cubed.ai engagements.
Governance
How we use subprocessors
We engage subprocessors only where doing so provides operational, security, or reliability benefits we cannot reasonably deliver ourselves.
-
Security posture
Independent attestations, such as SOC 2 or ISO 27001, and the results of our security questionnaire. -
Data-protection commitments
Appropriate Data Processing Addenda and, where applicable, transfer mechanisms including EU Standard Contractual Clauses and the UK addendum. -
Operational fit
The vendor's track record, support model, and ability to meet our SLAs.
All subprocessors are bound by written agreements that require them to process data only on our documented instructions, maintain appropriate technical and organizational security measures, and cooperate with our audit and incident-response obligations.
Changes
Notice of Changes
We may update this list as our subprocessors change. Material changes, such as the addition of a new subprocessor that processes client end-user data, will be noted here and, where required by contract, communicated to affected clients with at least thirty (30) days' notice prior to the new subprocessor going live, allowing reasonable time to object.
To receive notification of changes, email info@3cubed.ai with the subject line “Subprocessor change notifications.”
Contact
Questions
Questions about this page or any of the subprocessors listed: info@3cubed.ai.