Sub-processors

Infinex AI relies on a small set of third-party services ("sub-processors") to operate the platform. This page lists every sub-processor that may process personal data on our behalf. It is published in accordance with GDPR Article 28 and updated whenever we add, remove, or change a sub-processor.

Enterprise customers on an active DPA receive at least 30 days notice before any new sub-processor is added. To subscribe to these notifications, email support@infinexai.io.

Infrastructure

• Railway — application hosting, Postgres database, object storage. US region (EU available on request). Encryption at rest by default.
• Cloudflare — DNS, CDN, DDoS protection. Global edge network.

AI / generation providers

• Anthropic (Claude) — script generation, chat responses, project planning. US.
• HeyGen — avatar video rendering and custom avatar training. Stores biometric consent evidence. US.
• ElevenLabs — voice synthesis and custom voice training. US.
• fal.ai (Omni) — motion graphics and b-roll generation. US.
• Google (Gemini) — fallback text generation. US.

Media handling

• Cloudinary — video storage, encoding, and CDN delivery. US.
• Cobalt — public media URL fetching for external-source ingestion. US.

Billing & communication

• Polar — subscription billing, checkout, and invoicing. Never sees card details (held by Stripe).
• Stripe — PCI-DSS compliant payment processor (used by Polar).
• Resend — transactional email delivery. US.

Governance

• Every sub-processor above is bound by Standard Contractual Clauses (SCCs) for EU-origin data.
• New sub-processor engagements require an internal DPA and security-posture review.
• Sub-processors are audited annually against their reported controls.

Contact

For questions about a specific sub-processor, DPA copies, or to raise a concern about our data-processing practices, contact support@infinexai.io.