Sub-processors
Notes: Some services are optional or configuration-dependent (e.g., choice of LLM providers, observability tooling). When a service is not enabled for a given deployment, it will not process customer data.
Core infrastructure & hosting
| Sub-processor | Purpose | Location | Notes |
|---|---|---|---|
| Google Cloud (Google LLC) | Host, run, store, and secure the Cortex platform and customer content. Cloud Run · Cloud SQL (PostgreSQL) · Cloud Storage · Pub/Sub · Secret Manager · Cloud Logging/Monitoring · Artifact Registry · Cloud Build | EU (europe-west*) by default | Governed by Google Cloud DPA and security controls. |
| Google (Firebase / Cloud Identity Platform) | User authentication, session management, identity verification. Firebase Auth / Identity Platform | EU (europe-west*) by default | Authentication is a core security control. Governed by Google Cloud DPA. |
AI / model providers (configuration-dependent)
| Sub-processor | Purpose | Location | Notes |
|---|---|---|---|
| Google Cloud (Vertex AI) | AI processing for chat, extraction, generation, embeddings, and document parsing. LLM inference (Gemini) · Embeddings · OCR / Mistral OCR via Vertex | EU (europe-west*) by default | Governed by Google Cloud DPA and security controls. |
| Landing AI | Powering document parsing, extraction, figure description, and schema wizard. AI inference for agentic document extraction and extraction schema generation | EU by default | Governed by Landing AI DPA. View safeguards → |
Observability / product analytics (if enabled)
| Sub-processor | Purpose | Location | Notes |
|---|---|---|---|
| Langfuse (Langfuse GmbH) | Monitor and debug AI runs — latency, quality, prompt/response traces. LLM tracing/observability | Depends on Langfuse deployment configuration | Governed by Langfuse DPA. May process prompt/response content if configured to log it. |
Change management
Cube5 will update this list when adding or replacing sub-processors used to provide Cortex. Customers are notified at least 30 days in advance of material changes in accordance with the Data Processing Agreement.
Last updated: 2026-04-14