AX Frame subprocessors
These are the companies that process personal data on behalf of REKA Inisiatif Sdn Bhd to run AX Frame. It is the same list that appears in the privacy notice, and it is generated from one shared record, so the two cannot disagree.
| Subprocessor | What it does | Data it receives | Location | When |
|---|---|---|---|---|
| Supabase | Database, sign-in and file storage. The system of record for the product. | Everything a customer enters into the product, plus the name, email address and profile picture used to sign in. | A cloud region outside Malaysia (see where the product stores its data) | Always |
| Vercel | Runs and serves the application. | Request metadata (IP address, user agent, requested path) in server logs. | Global edge network; outside Malaysia | Always |
| Google (sign-in and logo service) | Sign-in with a Google account, and the small logo beside a vendor or website. | The sign-in request. Google returns the person's name, email address and profile picture. To draw a logo for a vendor or website without a bundled logo, the browser asks Google's favicon service for it by domain name only. | Global; outside Malaysia | Always |
| Stripe | Subscription payments. | The customer's email address and payment details. Card numbers go to Stripe directly and are never stored by the product. | United States and other regions; outside Malaysia | Only for products with paid plans, and only once someone subscribes |
| AntaraX email (delivered through Resend) | Sends the emails a product needs to send. | Recipient email addresses and message contents, such as sign-in links, renewal reminders, summaries, alerts, invitations and announcements. | United States | Always |
| Anthropic (Claude) | Generates text and structured results with an AI model. | The project brief you write, any focus you type for a review, and the names, vendors, categories and monthly costs of the assets in scope, plus your earlier decisions on suggestions. Your name, email address, account identifiers and access details are never included. | Provider infrastructure outside Malaysia (United States) | Only when an API key has been configured. Without one, plans are built from a local catalogue and no data leaves AX Frame |
| Google (Gemini) | Generates text and structured results with an AI model. | The project brief you write, any focus you type for a review, and the names, vendors, categories and monthly costs of the assets in scope, plus your earlier decisions on suggestions. Your name, email address, account identifiers and access details are never included. | Provider infrastructure outside Malaysia (the exact region depends on Google's service) | Only when an API key has been configured. Without one, plans are built from a local catalogue and no data leaves AX Frame |
| ScreenshotOne | Captures a thumbnail of a monitored site so a person can see it is up. | The monitoring URL entered for an asset. | Provider infrastructure outside Malaysia | Only for assets with a monitoring URL, and only if a key has been configured |
| Cloudflare | Hosts websites and applications and passes traffic and email to the product, and answers public DNS lookups where a product offers domain checks. | The domain names of Domain assets, and of any domain you run the domain check on, as an ordinary public DNS question. Only if thumbnails are set to use Cloudflare: the monitoring URL you entered for an asset. | Global network; outside Malaysia | The DNS lookups run for assets in the Domain category and for the domain check; thumbnails only if a key has been configured |
| rdap.org (the domain registries) | Looks up who a domain is registered with and when it expires. | The domain name a person types into the domain check, and nothing else. rdap.org passes it to the registry for that domain's ending (.my, .com and so on). | Depends on the registry for the domain | Only when a person checks a domain |
| Google PageSpeed Insights | Measures how fast a website loads, on request. | The public website address of the asset a person runs a speed test on. | Global; outside Malaysia | Only when a person presses the speed-test button |
| Google Workspace (REKA mail and support) | REKA's own email and the shared support mailbox, used to receive and answer messages. | Messages people send to REKA or to a product's support address, including the sender's address and anything written in the message. | Global; outside Malaysia | Always |
Where AX Frame is stored
AX Frame stores its data with Supabase, outside Malaysia.
Changes to this list
We update this page, its version and its effective date when a subprocessor is added, removed or changed, and the changelog records it. Business customers who want to be told of a change in advance can ask at support@go.antarax.ai.