legal . obvix labs
sub-processors.
Obvix Labs engages a small number of third-party services to operate amyy. each entry below identifies the service, what it processes, and where it sits.
for a copy of any current DPA, or to request that we notify you when this list changes, email connect@obvix.io.
| vendor | purpose | data | region |
|---|---|---|---|
| Google LLC (Sign-in with Google) | Authentication | Google account ID, email, name | United States |
| OpenRouter, Inc. | LLM API gateway | Conversation messages routed to the model | United States |
| Anthropic PBC | Underlying language model (Claude) | Conversation messages required to generate replies | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring | Stack traces (no request bodies, no PII) | United States |
| Hosting / cloud provider (e.g. Hetzner, DigitalOcean) | Compute, database, object-storage backups | All Amy data at rest, encrypted disks + backups | EU or US (provider-dependent) |
| Google LLC (Analytics, optional) | Aggregate page-view analytics — only after cookie consent | Page paths, anonymized client identifiers | United States |
international transfers.
where data crosses jurisdictions (EU → US in particular), we rely on the standard contractual clauses each vendor publishes. EU users can request the SCC reference numbers from connect@obvix.io.
changes.
we notify the user-rights inbox above whenever a sub-processor is added or removed. the “last updated” date at the top reflects the most recent change.