Sub-processors
Last updated 21 June 2026 · v2026-06-21
To provide Bob — CmdOS by LEVEL7 we engage the third-party sub-processors below, each under data-protection terms. We will update this page and give notice before adding or replacing a sub-processor that processes Customer personal data, so that customers with the right to object can do so.
Current sub-processors
| Provider | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, backups | EU — Frankfurt (eu-central-1) | Within EEA / SCCs |
| OpenClaw (open-source agent engine) | Autonomous-agent runtime that powers Bob — self-hosted by us on our own infrastructure | EU — our AWS (Frankfurt) | Within EEA (self-hosted) |
| Anthropic | Large-language-model processing (all EU/EEA/UK traffic) | United States | SCCs |
| MiniMax | Large-language-model processing (non-EU users only; disabled for EU/EEA/UK) | China | SCCs + supplementary safeguards |
| OpenAI | Text-embedding model for Agent memory and semantic search | United States | SCCs |
| xAI (Grok) | Image generation, supplementary language-model processing, and voice-message transcription | United States | SCCs |
| Stripe | Payment processing and subscription billing | EU / United States | SCCs / adequacy |
| Resend | Transactional email delivery | United States / EU | SCCs |
| Fly.io / AWS (isolated per-tenant hosting) | Agent runtime hosting (where enabled) | EU / United States | Within EEA / SCCs |
| Meta Platforms (WhatsApp) | Messaging channel (when you connect WhatsApp) | EU / United States | SCCs / adequacy |
| Telegram | Messaging channel (when you connect Telegram) | Global | SCCs / adequacy |
Notes
- Channels (WhatsApp, Telegram) and Integrations only process data when you connect them, and act under their own terms in addition to ours.
- EU/EEA/UK workspaces are routed to Anthropic only; MiniMax is not used for them.
- We require each sub-processor to provide adequate protection and to process personal data only on documented instructions.
Notice of changes
To be notified of changes to this list, contact privacy@thelevel7.ai and ask to be added to sub-processor change notifications. Details such as a provider's exact data-centre region may vary by feature and over time.