CYBIX
Sub-processors
Version 2026-08-26 · Last updated 26 August 2026
Multichoiceagency (CYBIX) uses the parties below to deliver the service. Each one is bound by a written agreement that meets GDPR Art. 28. We tell DPA customers at least 14 days before a new sub-processor starts processing their data; see § 7 of the Data Processing Agreement for the objection right. Self-hosted installations use none of these unless the customer configures them.
| Provider | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH (Gunzenhausen, Germany)Always | Hosting: servers, storage, network and backups for the CYBIX platform | All workspace data at rest — accounts, conversations, contacts, tickets, knowledge documents, attachments, logs | Germany and Finland (EU). Support and administration from the EU only | EU processing; GDPR Art. 28 DPA v1.2 signed 26 Aug 2026; ISO 27001, BSI C5 Type 2, § 8a BSI-KritisV |
| OpenRouter, Inc. (United States) — routing to the configured language modelWhen BIX answers or assists in a conversation | Generating BIX replies, suggested answers and drafts | The current conversation text and the knowledge snippets retrieved for it; no account data | United States | Standard Contractual Clauses; data used only to produce the reply |
| Google Ireland Ltd / Google LLCPer feature, when used | Sign in with Google; Gemini for AI-assisted optimisation of your knowledge base and support content, and for call transcription; Google Translate for on-request translation; Google Analytics and Search Console data when you connect them for BIX insights | Sign-in: email and name. Optimisation: the content being improved. Transcription: call audio, only if your workspace enables transcripts. Translate: the message being translated. Analytics: aggregated site metrics from the properties you connect | EU and United States | EU-US Data Privacy Framework and SCCs |
| Stripe Payments Europe Ltd / Stripe, Inc.Paid hosted plans | Subscription billing for the hosted plans | Billing contact, company details, payment method (held by Stripe, never by CYBIX) | Ireland and United States | EU-US Data Privacy Framework and SCCs |
| Apple Inc.iOS app users | App Store subscriptions and push notifications for the iOS app | Apple transaction identifiers; device push token | United States | EU-US Data Privacy Framework |
| 650 Industries, Inc. (Expo)Mobile app users with notifications on | Delivering push notifications to the mobile app | Device push token and the notification text (a new-message alert; message content is hidden in restricted mode) | United States | Standard Contractual Clauses |
| ipapi.coHosted plans with visitor location enabled | Approximate visitor location (city, country) shown to agents | Visitor IP address | United States | Standard Contractual Clauses |
Channels you connect yourself
These are not CYBIX sub-processors: you hold the account, and the provider processes the messages on your instruction. CYBIX only relays them into your inbox.
- Meta Platforms (WhatsApp) — Messages you receive and send on a WhatsApp number you connect. Meta's terms apply to that number.
- Telegram Messenger Inc. — Messages on a Telegram bot you connect.
- Your mail provider (IMAP/SMTP) — Email conversations flow through the mailbox you connect, on your provider's servers.
- Microsoft (Outlook sign-in / mailbox) — Only if you connect a Microsoft account.
Not a sub-processor
Voice and video calls run peer-to-peer over WebRTC between the visitor and your agent; no media relay provider sees them. A telephony (SIP) provider will be added to this list before phone calling is switched on.
Hetzner’s own subcontractors
Hetzner’s DPA lists subcontractors in Finland, the United States and Singapore. CYBIX selects EU server locations only, and Hetzner confirms that data on EU locations is processed exclusively within the EU; the non-EU entities are therefore not involved in processing CYBIX data.
Changes
To be notified of changes to this list, email support@cybix.app with the subject “Sub-processor notifications”. Previous versions are available on request.