Legal
Sub-processors
To run X3JS we rely on a small number of trusted service providers (sub-processors) that process personal data on our behalf. We keep this list current and update it when we add or change a provider.
Last updated September 26, 2026
About This List
The providers below process personal data on our behalf to deliver the Service, under contracts that require them to protect it. Some are located outside Türkiye and the EEA; where data is transferred abroad we rely on a lawful basis as described in our Privacy Policy.
Current Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Object storage and content delivery for uploaded assets | United States / global |
| Google LLC | reCAPTCHA — abuse and bot protection on sign-up and sign-in | United States |
| Anthropic, PBC | AI processing for AI-assisted features | United States |
We also use infrastructure and transactional-email providers to host the Service and send account and security emails. We will name them here as this list is finalised.
Changes
When we add, remove or replace a sub-processor we update this page, and material changes are reflected in the "Last updated" date above.