Subprocessors
ATXfleetOS uses a small set of third-party service providers ("subprocessors") to deliver the platform. This page lists every one of them, what it does, the categories of data it touches, and where the processing happens — plus the customer-connected services that flow data through accounts our customers own. Customer data on our own infrastructure resides in the United States.
Current subprocessors
| Provider | Function | Data categories | Processing location |
|---|---|---|---|
| Hostinger | Server hosting for the ATXfleetOS platform and this website | All platform data (application databases, uploads, logs) | United States (Boston, MA datacenter) |
| Backblaze B2 | Encrypted-transport offsite backups and media object storage | Database backups; uploaded photos and files | United States (US-East region) |
| Supabase | Managed database services for messaging features | Message archives and related search indexes | United States (AWS us-east-1); provider encrypts data at rest |
| Anthropic | AI processing (analysis features) via API | Content submitted to AI features (e.g., invoice text) | United States-based provider; API inputs/outputs not used for model training under Anthropic's commercial API terms |
| OpenAI | AI processing (embeddings/search) via API | Content submitted to AI features (e.g., message text for search) | United States-based provider; API data not used for training under OpenAI's API terms |
| Resend | Transactional email delivery | Email content and recipient addresses (notifications, demo-request leads) | United States-based provider |
| Business email (Workspace), spreadsheet integrations, and offsite storage of database backup copies (Google Drive) | Emails to our mailboxes; data customers connect via Sheets integrations; encrypted-transport copies of database backups | Google-operated infrastructure (US-based provider) |
Customer-connected services (not subprocessors)
Some data flows run through accounts our customers own and control, under the customer's own agreement with that provider — so they are not our subprocessors, and we list them here for completeness:
- Samsara — vehicle GPS/odometer telematics flows from the customer's own Samsara account into the platform.
- Telegram — optional alert and messaging features send notifications to chats the customer configures, using the customer's own Telegram account.
- Shop-management integrations (e.g., BigShop, Shopmonkey) — connected under the customer's own accounts where enabled.
How changes are handled
Before we add a subprocessor that will process customer data for existing services, we update this page and email each customer's administrative notice address at least 30 days in advance, with an opportunity to object. Additional recipients can subscribe by writing to hello@atxfleetos.com with the subject "Subprocessor notices."
We require each subprocessor to be bound by written data-protection terms consistent with our own commitments — including the reasonable-security obligations Illinois law (815 ILCS 530/45) requires for personal information disclosed to service providers. We are completing executed data-processing agreements with each provider listed as part of our current legal program; execution status is available to customers on request.
Questions
Security reviews and vendor questionnaires: hello@atxfleetos.com. See also our Security Practices and Privacy Policy.