Legal
Sub-processors
The third parties 5Lab Group engages to process personal data on behalf of its customers.
Last updated: 14 August 2026
1. About this list
This is the current, complete list of sub-processors we use to deliver ApolloSuite. We update this page before engaging a new sub-processor that would have access to customer personal data.
Customers who want to be notified of changes can ask at hello@5lab.co, and we will give reasonable notice before a change takes effect.
2. Sub-processors we engage directly
These providers process data on every ApolloSuite deployment that we operate.
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Google LLC (Google Cloud) | Application servers, database, and file storage | Singapore (asia-southeast1) |
| Cloudflare, Inc. | DNS, content delivery, and edge traffic filtering | Global network |
| OpenRouter, Inc. | Language-model gateway for assistant features, thread summaries, and review analysis | United States, plus the downstream model providers configured |
OpenRouter routes requests on to downstream model providers. Which provider is called depends on the model configured for the customer's deployment; customers can ask us which one is in use at any time.
3. Services that run only when a customer enables them
These process nothing until a customer connects them with their own account. Once connected, processing is governed by that provider's terms alongside our agreement with the customer.
| Category | Example providers | Data involved |
|---|---|---|
| Messaging channels | LINE, Meta (Messenger, Instagram, WhatsApp), Telegram, TikTok | Messages, attachments, sender account identifiers |
| External object storage | Amazon S3 or any service speaking the same protocol | Media files uploaded into the system |
| Email delivery | Amazon SES, SendGrid, Mailgun, Brevo, or the customer's own SMTP server | Recipient email addresses and message content |
| SMS delivery | Twilio, ThaiBulkSMS | Recipient phone numbers and message content |
| Payment acceptance | Omise, 2C2P, KBank, PromptPay | Amounts, transaction status, and payment slips |
These connections use the customer's own accounts, so the customer contracts directly with the provider and is responsible for reviewing that provider's data processing terms.
4. Self-hosted deployments
Where a customer runs ApolloSuite on their own servers, the sub-processors in table 2 are replaced by whatever that customer chooses, and data does not pass through our infrastructure except for features the customer enables and deliberately points at our services.
5. Our commitment
We contract with each sub-processor on data protection obligations materially no less protective than those we give our customers, and we limit their access to what the service requires. We remain responsible to our customers for the performance of these sub-processors.
6. Contact us
For questions about this list, or to be notified of changes, contact:
5Lab Group Co., Ltd. (Head Office)
100/30, Sathorn Nakorn Tower, 19th FloorNorth Sathorn Road, Silom, Bang RakBangkok 10500, Thailand
- Company registration no.
- 0105560069123
- Tax ID
- 0105560069123
- hello@5lab.co