About This List
Upmoni LLC, doing business as Rubic, uses the subprocessors below to provide the Rubic Service. A subprocessor may process Customer Personal Data on Rubic's behalf. This list is incorporated into the Data Processing Addendum.
Processing locations describe the primary or generally available location relevant to Rubic. A provider may process limited data from other locations for support, security, resilience, or legal compliance under its applicable agreement.
Core Subprocessors
| Provider | Purpose | Processing location | Relevant retention |
|---|---|---|---|
| Google Cloud | Production compute, storage, networking, logging, and backups | United States, primarily us-central1; some global services | Service term and configured operational or backup lifecycle |
| MongoDB Atlas | Managed application database and database backups | United States, Google Cloud us-central1 | Service term and configured backup lifecycle |
| Cloudflare | DNS, edge delivery, traffic security, and website delivery | Global network | Provider operational and security lifecycle |
| OpenAI | AI inference and authorized processing of task context | No exclusive processing region | Up to 30 days under the standard API configuration |
| Anthropic | AI inference and authorized processing of task context | No exclusive processing region | Up to 30 days under the standard API configuration |
| Sentry | Dashboard error and performance monitoring | United States | 30 days; session replay is disabled |
| New Relic | Application, infrastructure, tracing, and log observability | United States | 8 days for APM, browser, tracing, process, and serverless data; 30 days for logs and custom or AI-monitoring data; 90 days for Long Term Memory data; up to 395 days for infrastructure-integration data. Browser session replay is not used |
| Mailjet / Sinch Email | Transactional email and email delivery, open, and click reporting | European Union data centers | Engagement statistics up to 13 months depending on the active plan; contacts and reusable templates may remain for the account lifetime |
Other Providers and Customer-Directed Services
The following providers may receive personal data for Rubic's own controller-side operations or because Customer chooses to use a particular function. Their role depends on the processing context and they are not always subprocessors for Customer Personal Data:
- Stripe: subscription billing, payment processing, and fraud prevention.
- Google Analytics: consent-gated website analytics.
- GitHub: a Customer-authorized source code integration used when Customer connects repositories or requests delivery to GitHub.
Changes to This List
Rubic will update this page when its core subprocessors change. Customers covered by the DPA receive the advance notice and objection rights described in Section 6 of the DPA.
Contact
Questions or objections concerning a subprocessor may be sent to [email protected].