Legal
Sub-processors
The third-party providers we use to deliver our services, and where each one operates.
Last updated: 25 August 2026
We use the providers below to deliver our services. Each one is bound to handle information only to provide its service to us, and we remain responsible to our clients for what they do with it. This page is referenced by our Data Processing Agreement and is the current list.
Some operate outside Australia, which means personal information in the relevant service is handled overseas. Client privacy policies need to say so, and we provide standard wording that names the countries.
AI agents themselves run on our own servers in Australia. Model routing is the exception: a request sent to a language model leaves our infrastructure through OpenRouter and is served by whichever provider is configured for that agent. Each model’s data-handling terms – retention, and whether the provider may train on what it receives – are published in OpenRouter’s model registry. Which models an agent may use is a configuration choice, and one worth making deliberately.
OVH
SingaporeServer infrastructure for Azoria Leads and the websites we host on it.
Enquiry records, website content, application databases.
Synergy Wholesale Pty Ltd
AustraliacPanel web hosting infrastructure and domain registration, provisioned and managed through our own admin panel.
Hosted website content, mailboxes, and databases on cPanel plans. Domain registrant details, which are passed to the relevant registry. Registrant details for .au domains are also held by auDA and the .au registry under their own rules.
Microsoft (Microsoft 365)
AustraliaOur email – sending and receiving, including lead notifications and enquiry receipts.
Email content and addresses, including enquiry details in transit. Tenant region. Microsoft may process limited data elsewhere under its own terms.
OpenRouter, Inc.
United StatesModel routing for AI agent services – directs a request to whichever model provider is configured for that agent.
The content of prompts and responses in agent workflows, which may include information you or your customers put into them. A request is then served by the model provider configured for that agent, in whichever region that provider operates.
Cloudflare, Inc.
United StatesDNS, content delivery, TLS termination, and Turnstile bot screening on contact forms.
Traffic metadata, IP addresses, and information in transit.
Stripe Payments Australia Pty Ltd / Stripe, Inc.
Australia and the United StatesPayment processing and card storage for our own billing. Stripe captures and stores card details directly – we never receive them.
Billing contact details and payment card data, for our clients only. No end-customer data.
GitHub, Inc.
United StatesSource code hosting and the container registry our deployments are built from.
Application code and configuration. No client or end-customer personal information.
We give clients reasonable notice before adding a sub-processor that handles personal information in a materially new way. Questions about this list can be sent to [email protected].