Sub-processors
Last updated 17 June 2026
To run Xello we rely on a small set of sub-processors. We update this list before adding a new one. The list below reflects Xello's actual stack -- not every provider sees your data, and the optional ones are only used if you enable the matching feature.
Core sub-processors
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| PulseHeberg (SAS) | Application hosting, PostgreSQL database, object storage for inbox/attachment files, encrypted backups | France | EU hosting |
| Amazon SES (AWS) | Delivery of transactional emails (invitations, notifications, billing alerts), orchestrated by our self-hosted mail service | France (eu-west-3, Paris) | EU SCCs, AWS DPA |
| Stripe | Payments, subscriptions and the billing portal | Ireland + USA | Stripe DPA, EU SCCs, EU-US DPF |
| Atlassian / Trello | Core integration: read and write your cards and boards via the OAuth access you grant | USA | Atlassian DPA, EU SCCs, EU-US DPF |
Optional sub-processors (only if you enable the feature)
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| Drive/Docs/Gmail/Calendar access when you connect a Google account | USA | Google DPA, EU SCCs, EU-US DPF (not used for ads or AI training) | |
| Anthropic | AI generation for the Claude Project / RAG export | USA | DPA, EU SCCs -- no model training on API data by default |
| Mistral AI | AI fallback for the RAG export | EU (France) | DPA, EU-hosted -- no training on API data |
| GitHub | Private repository target of the RAG export | USA | GitHub DPA, EU SCCs |
| Jina, Firecrawl | Web content extraction for the RAG export, only when configured | USA / EU | per-provider terms |
Transactional email is orchestrated by a self-hosted mail service on our French infrastructure and delivered through Amazon SES in the Paris (eu-west-3) region. We will give notice before adding a new sub-processor, so you can object.
Contact
Questions about this list: privacy@xello.pro.