Legal
Sub-processors
Last updated: August 24, 2026
To run Evonx we rely on a small number of third-party providers. Each one is bound by a written agreement that limits it to processing data on our instructions, holds it to confidentiality, and requires security measures at least as protective as our own. This page is the current list, published under Article 28(2) of the GDPR and referenced by our Data Processing Agreement.
| Provider | What it does for us | Processing location |
|---|---|---|
| Hetzner Online | Cloud infrastructure — application servers, databases, and preview environments | Germany (Frankfurt) |
| Anthropic | AI model provider — processes prompts and the code excerpts needed to answer them | United States |
| OpenAI | AI model provider — processes prompts and the code excerpts needed to answer them | United States |
| fal.ai | Image and asset generation for the visuals produced inside your project | United States |
| Stripe | Payment processing, subscriptions, and invoices | United States, Ireland |
| Resend | Transactional email delivery — account verification and service notifications | United States |
| Sign-in with Google and website analytics (analytics only with your cookie consent) | United States | |
| GitHub (Microsoft) | Repository access and pull request delivery — only for the repositories you connect | United States |
| Shopify | Theme read and write access — only for the stores you connect | Canada, United States |
Providers you switch on yourself
GitHub and Shopify appear above because Evonx works with them on your behalf — but only after you connect a repository or a store. If you never connect one, no data reaches that provider. You can revoke either connection at any time from your Git provider or your Shopify admin.
Changes to this list
Before we add a new sub-processor that handles customer personal data, we update this page. Customers on a Data Processing Agreement receive at least 30 days notice and may object on reasonable data-protection grounds; if we cannot resolve the objection, you may terminate the affected part of the service. To be told about changes, email [email protected] and ask to be added to the notification list.
International transfers
Our core infrastructure — application servers, databases, and preview environments — runs in the European Union, so the data Evonx stores stays in the EU. The AI model, payment, email, and analytics providers above process data in the United States. Where personal data leaves the EEA or the United Kingdom, we rely on a transfer mechanism recognised under the GDPR: an adequacy decision where one applies, and otherwise the European Commission Standard Contractual Clauses together with the UK International Data Transfer Addendum. More detail is in our Privacy Policy.
What is not on this list
Your source code stays in your own repositories; Evonx delivers changes as pull requests rather than holding your codebase for you. We do not share personal data with advertising networks or data brokers, and we do not sell personal data.