Subprocessors

Current subprocessors

These are the current third-party providers Cruxi uses to deliver the live service described in the Trust Center and Privacy Policy.

Subprocessor list

Provider Purpose Typical data categories
Google Cloud Platform Application hosting, file storage, networking, logging, and managed infrastructure. Account data, workspace data, uploaded files, logs, IP/device metadata.
MongoDB Atlas Managed operational database for application records. Account data, project metadata, workflow state, consent and privacy-request records.
Google Vertex AI / Gemini AI-assisted workflow processing when a user invokes AI features. User-submitted prompts, device descriptions, regulatory workspace content relevant to the requested feature.
OpenAI AI-assisted drafting, reasoning, and supported workflow processing in live regulatory features that call OpenAI-backed models. User-submitted prompts, device descriptions, draft content, and regulatory workspace content relevant to the requested feature.
Stripe Payment processing, billing, and subscription operations. Billing identifiers, subscription metadata, payment-related contact data.
Google Analytics / Google Tag Manager Measurement and analytics on public/app surfaces where enabled by consent. Usage events, browser/device metadata, page analytics.
Google identity services Authentication and sign-in flows where Google login is used. Name, email, profile/account identifiers needed for sign-in.

How changes are handled

This page is updated when the live subprocessor list changes in a way relevant to customer data processing. If you need procurement support or a contractual notice process, contact privacy@cruxi.ai.