Sub-processors
Who else touches the data.
Two lists. The first is Fixi's own, for this website and for company email, and every row carries evidence you can check yourself. The second belongs to the odel-labs platform, and it is not published yet.
Version 1.0. Effective . Last reviewed .
1. Definitions
In this document, "processor" means a third party that handles personal data on Fixi's behalf where Fixi is the controller, and "sub-processor" means a third party engaged where Fixi processes a customer's data as a processor. The first list below holds processors. The platform list, when it is published, is the sub-processor list a data processing agreement would cite.
2. Fixi's own processors
Verified
These support this website and company correspondence. This site sets no cookies, runs no analytics and submits no forms, so none of them receives anything about you as a visitor beyond what a web server and a mail server necessarily see. The colour scheme you pick stays in your own browser's local storage, which is never attached to a request, so it reaches none of them.
| Item | Status | Detail |
|---|---|---|
| Vercel | Published | Website hosting and TLS This site is served by Vercel. The apex resolves to 76.76.21.21. Content is served from the nearest edge, which has been observed as both London and Washington, so a request may be served outside the United Kingdom. The site holds no personal data beyond the host request log. |
| Cloudflare | Published | Authoritative DNS only Nameservers are sharon.ns.cloudflare.com and rocky.ns.cloudflare.com. The records are not proxied, so Cloudflare answers DNS queries and does not see site traffic or page content. |
| Google (Workspace) | Published | Company email The single MX record is smtp.google.com. SPF authorises _spf.google.com. The storage region is the unpublished row on /data-protection. |
| Resend, on Amazon SES | Published | Transactional email, configured DKIM is published at resend._domainkey, and send.hellofixi.com authorises amazonses.com with a feedback endpoint in eu-west-1. Configured and authorised to send. Whether it is actively in use is a platform question rather than a website one. |
Each evidence line names a record you can look up. That is deliberate: a sub-processor list nobody can verify is a claim, and this one would rather be checked.
3. The odel-labs platform
2 not published
If you are reviewing Fixi as a supplier and you need the list of who processes customer data inside odel-labs, and in which country, that is the list below and it is not published yet. It is not omitted and it is not being withheld: nobody has confirmed it against the running platform, and this page will not print a list assembled from what a platform of this shape usually uses.
| Item | Status | Detail |
|---|---|---|
| odel-labs platform sub-processors | Not published | Needs each sub-processor, what it processes, and the country it sits in. Answered together with the residency row on /security, per the note in this file. |
| Notice before a new sub-processor is added | Not published | Needs the notice period in days, which the customer terms must match |
None of these 2 is published yet. Rather than a figure nobody has checked, this page says so. Ask privacy@hellofixi.com and it is answered within 2 working days.
The same applies to where client data is held. That answer and this list are published in the same change, because a region without a sub-processor list is half an answer, and either half on its own invites a wrong conclusion.
4. Transfers outside the United Kingdom
Where a sub-processor sits outside the United Kingdom, the transfer is covered by the IDTA or by the UK Addendum to the EU SCCs. This site itself is served from the nearest edge location, which is not always in the United Kingdom, and that is recorded against the hosting row above rather than glossed over.
5. Ask, and how long it takes
For the platform list ahead of it being published, write to privacy@hellofixi.com and you will have a reply within 2 working days. If a contract needs a warranty about sub-processors, ask for it in the agreement rather than rely on this page.