Notice
Customer contracts may include notice terms for material subprocessor changes.
Subprocessors
Subprocessor transparency for procurement.
This page explains the types of vendors and integrations Commandix may use to operate the website, application, identity flows, email, security, and optional workspace integrations.
Subprocessor table
Current and optional service categories.
Exact vendors and contractual terms may vary by deployment, customer agreement, and enabled integrations. Enterprise customers can request a deployment-specific list during procurement.
| Category | Purpose | Data involved | Status |
|---|---|---|---|
| Hosting and infrastructure | Serve the application, API, database, files, logs, and supporting services. | Workspace data, account data, logs, technical metadata. | Core platform service. |
| Microsoft identity and Microsoft 365 | OAuth login, workspace sync, calendar or Microsoft 365 integration when configured. | Account identifiers, profile data, group data, integration metadata. | Optional integration / identity provider. |
| Google identity and Google Workspace | OAuth login and Google Workspace sync when configured. | Account identifiers, profile data, group data, integration metadata. | Optional integration / identity provider. |
| Slack | Workspace notifications and channel integration when configured. | Workspace identifiers, message metadata, selected task or notification content. | Optional integration. |
| Email delivery | Send contact notifications, confirmations, product messages, and privacy request notifications. | Email address, name, message content, notification content. | Core or optional depending on deployment. |
| CrowdSec and security tooling | Detect scanners, abusive requests, and suspicious traffic patterns. | IP address, request path, user agent, security event metadata. | Security service. |
| Let's Encrypt | Issue and renew TLS certificates. | Domain names and certificate validation metadata. | Certificate authority. |
| Bot protection / reCAPTCHA-compatible flow | Verify public form submissions when configured. | Token, IP address, user agent, risk metadata. | Optional public-form protection. |
Review process
Enterprise customers can request more detail.
Subprocessor review is part of procurement because the right answer depends on deployment, region, enabled integrations, and contract terms.
Objection
If a customer has a reasonable objection, Commandix expects to discuss available mitigation or alternatives.
Integration choice
Optional integrations such as Microsoft 365, Google Workspace, Slack, or calendar flows are enabled by customer choice.
Data minimization
Integration scope should be limited to what is needed for the selected workflow.
Security review
High-impact vendors should be reviewed for security, confidentiality, and contractual protection.
Documentation
Enterprise procurement can request deployment-specific vendor details during review.
Need deployment-specific subprocessor details?
Send your vendor review requirements and enabled integration list so we can respond accurately.