Legal

Sub-processors

The third parties 5Lab Group engages to process personal data on behalf of its customers.

Last updated: 14 August 2026

1. About this list

This is the current, complete list of sub-processors we use to deliver ApolloSuite. We update this page before engaging a new sub-processor that would have access to customer personal data.

Customers who want to be notified of changes can ask at hello@5lab.co, and we will give reasonable notice before a change takes effect.

2. Sub-processors we engage directly

These providers process data on every ApolloSuite deployment that we operate.

Sub-processorPurposeProcessing location
Google LLC (Google Cloud)Application servers, database, and file storageSingapore (asia-southeast1)
Cloudflare, Inc.DNS, content delivery, and edge traffic filteringGlobal network
OpenRouter, Inc.Language-model gateway for assistant features, thread summaries, and review analysisUnited States, plus the downstream model providers configured

OpenRouter routes requests on to downstream model providers. Which provider is called depends on the model configured for the customer's deployment; customers can ask us which one is in use at any time.

3. Services that run only when a customer enables them

These process nothing until a customer connects them with their own account. Once connected, processing is governed by that provider's terms alongside our agreement with the customer.

CategoryExample providersData involved
Messaging channelsLINE, Meta (Messenger, Instagram, WhatsApp), Telegram, TikTokMessages, attachments, sender account identifiers
External object storageAmazon S3 or any service speaking the same protocolMedia files uploaded into the system
Email deliveryAmazon SES, SendGrid, Mailgun, Brevo, or the customer's own SMTP serverRecipient email addresses and message content
SMS deliveryTwilio, ThaiBulkSMSRecipient phone numbers and message content
Payment acceptanceOmise, 2C2P, KBank, PromptPayAmounts, transaction status, and payment slips

These connections use the customer's own accounts, so the customer contracts directly with the provider and is responsible for reviewing that provider's data processing terms.

4. Self-hosted deployments

Where a customer runs ApolloSuite on their own servers, the sub-processors in table 2 are replaced by whatever that customer chooses, and data does not pass through our infrastructure except for features the customer enables and deliberately points at our services.

5. Our commitment

We contract with each sub-processor on data protection obligations materially no less protective than those we give our customers, and we limit their access to what the service requires. We remain responsible to our customers for the performance of these sub-processors.

6. Contact us

For questions about this list, or to be notified of changes, contact:

5Lab Group Co., Ltd. (Head Office)

100/30, Sathorn Nakorn Tower, 19th FloorNorth Sathorn Road, Silom, Bang RakBangkok 10500, Thailand

Company registration no.
0105560069123
Tax ID
0105560069123