Providers and subprocessors

This list covers customer infrastructure and execution services as well as Bixlow’s own administration services. A provider is a subprocessor under the DPA only when it processes data on the customer’s behalf to provide its service to us. In that case, equivalent obligations and the DPA’s authorisation requirements apply. Details marked as pending require confirmation; this list does not itself certify locations or contractual safeguards.

Listed locations refer to the stated entity or region and do not exclude access from other countries. They must be confirmed against contracts and deployment settings. Stripe handles Bixlow billing and may act as an independent controller. Google is not a runtime subprocessor: its analytics concern Bixlow’s website and app and are described in the privacy and cookie policies. Visitors' approximate location is worked out on our servers with DB-IP's IP to City Lite database (https://db-ip.com, CC BY 4.0 licence): the IP address is not sent to any third party to geolocate it.

We will notify customers of new or replacement subprocessors at least 15 days in advance under the DPA, without requiring them to request these notices first. Contact bixlow@plakastudio.com for questions or data protection objections.