Subprocessors
This page lists the third-party service providers ("sub-processors") engaged by AB-Labz that may process personal data or Experiment Data on behalf of customers. This list is maintained in accordance with the Data Processing Agreement.
AB-Labz imposes data protection obligations on all sub-processors equivalent to those in the DPA. All transfers to non-EU sub-processors are covered by Standard Contractual Clauses.
Current Sub-processors
| Provider | Purpose | Data processed | Location | Transfer basis |
|---|---|---|---|---|
|
DigitalOcean LLC
digitalocean.com
|
Cloud hosting, databases, object storage, networking | All customer data at rest and in transit (platform infrastructure) | Frankfurt, Germany EU | EU location (no transfer) |
|
Postmark (Wildbit LLC)
postmarkapp.com
|
Transactional email delivery (account setup, license activation, notifications) | Recipient email address, name, and email content | USA | SCC |
|
OpenAI LLC
openai.com
|
AI-powered insights generation (optional platform feature) | Aggregated analysis results and experiment summaries — not raw Experiment Data | USA | SCC + OpenAI API zero-retention policy |
|
Google Ireland Ltd
google.com/analytics
|
Website analytics (marketing site ab-labz.com only) | Anonymized visitor data; IP anonymization enabled. Not used in the Workbench platform. | USA / EU | SCC + IP anonymization |
Changes to This List
AB-Labz will notify customers of any intended addition or replacement of a sub-processor at least 30 days in advance by:
- Updating this page with the new sub-processor and effective date.
- Sending an email notification to known customer contacts.
Customers may object to a new sub-processor under the terms set out in the DPA, Section 5.
Runner Mode
Customers using the Corporate Self-hosted tier process Experiment Data entirely within their own infrastructure. The sub-processors listed above do not process Experiment Data for Runner deployments, except for OpenAI (if the AI insights feature is enabled and configured to call the OpenAI API).
Contact
To object to a sub-processor addition or to request Standard Contractual Clauses documentation, contact [email protected].