What a sub-processor is
A sub-processor is a third-party vendor that processes some of your data on our behalf so we can deliver the service. waxTable is the processor you contract with; our sub-processors handle specific functions underneath us, under contracts that bind them to protect your data.
Why we use them
No serious software runs entirely on its own machines. Specialist vendors do specific jobs better, more reliably and more securely than we could alone — and using them lets us focus on what makes waxTable useful: helping Waxe draft great documents.
- Reliable, secure infrastructure to host the application and your data.
- AI model providers so Waxe can plan, price and draft your documents.
- Email delivery so the documents you send actually arrive.
- Payment processing so billing is handled safely.
Categories of sub-processor
Rather than name vendors here — where the list can change — we describe the categories and what each one is used for. The authoritative, current list is maintained separately (see below).
| Category | What it does for you |
|---|---|
| Cloud hosting and storage | Runs the application and stores your documents and assets securely |
| AI model providers | Power Waxe's drafting, pricing and design generation |
| Email delivery | Sends documents from your domain and delivers notifications |
| Payment processing | Handles plan payments and top-ups securely |
Seeing the current list
We keep an up-to-date list of named sub-processors, the function each performs and where they operate. It's referenced by the DPA so it stays part of your contractual record.
Check the legal pages
The current sub-processor list is published alongside our DPA and privacy policy on the marketing site.
Request it directly
If you need the list for a vendor assessment, email support and we'll send the current version.
Ask about change notifications
If your policy requires advance notice of new sub-processors, tell us and we'll explain how notice is given under the DPA.
What we require of them
Every sub-processor is engaged under terms that require them to protect your data to a standard consistent with our own commitments to you.
- Process data only for the function we engage them for.
- Apply appropriate security and confidentiality measures.
- Support international-transfer safeguards where relevant — see Privacy, GDPR & the DPA.