Subprocessors
This page lists the outside companies that help DUEX run the service. We keep the list short, name every company, and update this page when it changes. We notify active pilot customers by email at least 15 days before adding a new company that would process their pilot data.
Infrastructure and operations
These companies host the public site, the application, the database, and our business email.
| Company | What they do for DUEX | Location | Data they see | Their data terms |
|---|---|---|---|---|
| Cloudflare, Inc. | DNS, edge delivery, web application firewall, static hosting for duex.app. | USA (global edge) | Public site visit logs (IP, browser, referrer, page). | Trust Hub |
| Railway Corp. | Application hosting and managed Postgres database, where pilot data is stored. | USA | Pilot data submitted by customers, application logs. | Privacy · Terms |
| Google LLC (Workspace) | Business email at [email protected]. | USA | Email correspondence with [email protected]. | Workspace DPA |
Review processing
Each pilot submission may be processed in parallel by these providers, using their business API endpoints — whose contractual defaults do not train on submitted inputs (this is materially different from each provider's consumer chat product).
| Company | What they do for DUEX | Location | Data they see | Their data terms |
|---|---|---|---|---|
| Anthropic PBC | Hosted frontier-model inference for DUEX's multi-model review panel. | USA | Pilot data submitted as review inputs; review outputs. | Commercial Terms · Privacy |
| OpenAI OpCo, LLC | Hosted frontier-model inference for DUEX's multi-model review panel. | USA | Pilot data submitted as review inputs; review outputs. | Business Terms · Privacy |
| Google LLC (Vertex AI) | Hosted frontier-model inference for DUEX's multi-model review panel. | USA | Pilot data submitted as review inputs; review outputs. | Cloud DPA · Vertex AI data governance |
| xAI Corp. | Hosted frontier-model inference for DUEX's multi-model review panel. | USA | Pilot data submitted as review inputs; review outputs. | Terms of Service · Privacy |
How we notify you of changes
We notify active pilot customers by email at least 15 days before adding a new company that would process their pilot data. To object, reply to that notification within 10 days. We will either work to a mutually acceptable alternative or, at your option, end the affected pilot with a pro-rata refund of any unused fees.
How we choose subprocessors
Where applicable, we select subprocessors with established security certifications (SOC 2, ISO 27001) and standard contractual data-protection terms. The companies on this list have been chosen with that in mind.
Contact
Questions about this list: [email protected].