Sub-processors

Effective: April 29, 2026

1. Overview

These are the third-party Sub-processors Axolotl Army uses to operate the Service. The list is incorporated into our Data Processing Agreement at https://portal.axolotlarmy.net/legal/dpa as Annex III. The list is rendered from our internal configuration, so what you see below is the canonical list as of the effective date above.

Each Sub-processor is contractually bound by data protection obligations substantially equivalent to those in our DPA, including (a) confidentiality, (b) the appropriate technical and organizational measures required by Article 32 GDPR, and (c) — for transfers outside the European Economic Area, the United Kingdom, or Switzerland — the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914), the UK International Data Transfer Addendum where applicable, and the Swiss FADP adaptations. Axolotl Army remains fully liable to the Customer for the performance of every Sub-processor.

For background on how data flows through the Service, see our Privacy Policy; for the full data protection contract terms, see our Data Processing Agreement.

2. Effective date

This list is effective from April 29, 2026 and supersedes any prior version of the Sub-processor list previously published or distributed. The next scheduled review of this list is at the next revision of Axolotl Army's legal documents; the list may be updated earlier in line with the notice obligations in Section 4 below.

3. Current Sub-processors

Vendors not listed above either (a) do not process Customer Personal Data, or (b) are integrated only at the Customer's direct election through OAuth or API key (in which case the Customer's contract with that vendor governs the processing). For a list of optional integrations the Customer may enable, see the “Connected accounts” section of the portal.

4. Notification of changes

We will provide at least thirty (30) days' notice of any addition or material change to this list, by:

• updating this page with the new effective date;
• sending email notice to the primary administrator on every active customer account; and
• displaying an in-portal banner during the notice period.

Customers may object to a proposed change on reasonable data protection grounds during the notice period by emailing legal@axolotlarmy.net. The objection process and remedies (including pro-rata refund where the parties cannot resolve the objection) are set out in Section 5 of the Data Processing Agreement.

To subscribe to Sub-processor change notifications without holding an active customer account — for example, as part of an enterprise procurement evaluation — email legal@axolotlarmy.net with the subject line “Sub-processor change notifications”. We will add you to the notification list and confirm by reply. We notify subscribers at least 30 days before adding a Sub-processor that processes a new category of Customer Personal Data.

5. Contact

• Privacy questions and Data Subject requests: privacy@axolotlarmy.net.
• Sub-processor change notifications, DPA execution, and procurement enquiries: legal@axolotlarmy.net.
• Security incidents and breach notification: security@axolotlarmy.net.