Sub-processors
Last updated: 4 June 2026
comxbot (a product of Limelai Limited) uses a small number of trusted third parties to help deliver the service. This page lists our current sub-processors, what they are used for, where they process data and the safeguards that apply to any transfer outside the UK. It forms Annex 3 of our Data Processing Agreement.
Current sub-processors
| Sub-processor | Purpose | Data | Region | Transfer safeguard |
|---|---|---|---|---|
| Supabase | Primary database hosting (knowledge content, conversation logs, account records) | All workspace data stored by the service | EU | Processed within the EU |
| Clerk | Authentication and organisation management | Account identifiers, login credentials, organisation membership | US | UK Addendum to the EU Standard Contractual Clauses |
| Stripe | Subscription billing and payment processing | Billing contact and subscription metadata (card data is handled by Stripe and never stored by us) | UK / Ireland | Processed in the UK / EEA |
| Resend | Transactional email delivery | Recipient email address and message content (e.g. notifications, data-request confirmations) | US | UK Addendum to the EU Standard Contractual Clauses |
| OpenAI, Anthropic, Google | AI model providers (bring-your-own-key supported) | Prompts and content sent to the model at query time | US | UK Addendum / Standard Contractual Clauses. With bring-your-own-key, requests are routed through the customer's own provider account. No customer data is used to train models. |
A note on AI providers
When you use your own API key (bring-your-own-key), prompts and responses are routed through your own provider account, under your contract with that provider. We do not use customer content to train models, and we do not sell personal data or share it for third-party advertising.
Changes to this list
We keep this page up to date. Where we intend to add or replace a sub-processor that processes personal data on behalf of customers, we will update this page and, for customers under a Data Processing Agreement, give prior notice so you may object on reasonable data-protection grounds, as set out in the DPA. To be notified of changes, or to raise an objection, email dpo@comxbot.com.
comxbot is a product of Limelai Limited, a company registered in England and Wales. Company number: 16486216. Registered office: 86-90 Paul Street, London, EC2A 4NE.