1. What this list means
A subprocessor is a provider that may process personal data on behalf of SYNTHEX when SYNTHEX is acting as a processor/service provider for a business customer. Some providers may instead act independently for particular functions, such as payment processing. This page identifies the principal providers in the currently designed SYNTHEX stack and the functions for which they may be used.
Not every provider receives every category of data. SYNTHEX aims to route only the information reasonably needed for the provider's role.
2. Principal providers
| Provider | Purpose | Typical data involved | Location note |
|---|---|---|---|
| Google Cloud / Firebase | Authentication, database, server functions, hosting, security logs and cloud infrastructure. | Account identifiers, organization/campaign metadata, legal-acceptance records, logs and files where applicable. | United States and/or other provider-supported regions depending on configured service. |
| Stripe | Checkout, subscriptions, billing and payment processing. | Name/email, billing metadata, transaction IDs, subscription/payment status. Full card data is handled by Stripe rather than ordinary SYNTHEX application fields. | Provider-controlled global payment infrastructure. |
| Dropbox | Internal file storage/exchange where the production workflow uses Dropbox. | Source media, working files, rendered files and folder/file metadata. | Provider-controlled infrastructure and account configuration. |
| Make | Workflow automation and orchestration between approved production systems. | Order/campaign identifiers, status fields, URLs or file references, workflow metadata and limited content needed for the automated step. | Provider-controlled infrastructure. |
| Vizard | Media analysis, transcription, clipping, reframing, subtitles and related production functions when enabled. | Source video/audio, transcript, clip candidates, production settings and output metadata. | Provider-controlled infrastructure. |
| Auphonic | Audio processing and quality improvement when enabled. | Audio or audiovisual media, project identifiers and technical processing metadata. | Provider-controlled infrastructure. |
| Creatomate | Rendering, layout, branding and final media generation when enabled. | Approved clip media, text, subtitles, Brand Kit assets and render instructions. | Provider-controlled infrastructure. |
| CloudConvert | Technical file conversion, probing or media-format processing when enabled. | Media/files submitted for conversion and related technical metadata. | Provider-controlled infrastructure. |
Additional infrastructure or specialist providers may be used for support, communications, security, professional advice or a customer-specific workflow. Where a provider becomes a material subprocessor for customer personal data, SYNTHEX will update this page or provide other appropriate notice.
3. Data minimization and provider access
SYNTHEX seeks to limit data disclosed to a provider to what is reasonably necessary for the assigned function. Provider personnel, retention, machine-learning settings and subprocessors are governed by the provider's own services and the contract/settings available to SYNTHEX. Customers with special residency, deletion, no-training or vendor restrictions should raise them before purchase.
4. Provider changes
SYNTHEX may add, replace or remove providers as the service evolves. A replacement may be used when needed for security, reliability, availability, pricing, product changes or comparable operational reasons. Material changes involving customer personal data will be reflected here and, where an applicable DPA or law requires advance notice, through the method specified there.
5. Business-customer objections
Where a business customer is entitled under an applicable DPA to object to a new subprocessor, the objection must be based on a reasonable data-protection concern and submitted within the notice period stated in the DPA. SYNTHEX will work in good faith on a commercially reasonable solution, which may include configuration changes, an alternative workflow or termination of the affected processing if no reasonable alternative exists.
6. Questions
Questions about a provider's role or a customer-specific vendor requirement may be sent to admin@synthexsystemshub.com before the affected service is ordered.