Last updated: 3 August 2026 Status: Draft pending counsel and management approval. Not approved for publication or customer reliance.
This register separates (1) subprocessors used when LLM Machines processes Customer personal data on documented instructions, (2) providers used for LLM Machines' own website and business operations, and (3) suppliers that do not process personal data for us by default.
This register is not a substitute for a signed Data Processing Agreement. Customer-specific subprocessors, transfer safeguards, notice periods, objection procedures, and contractual rights are governed by the applicable signed DPA and Order Form.
Customer-data subprocessors
Current approved list: none.
Nothing leaves your infrastructure. For workloads processed within the supported Core Appliance boundary, prompts, model responses, tool arguments, tool results, request and response bodies, operational metadata, and audit records remain inside the Customer-controlled deployment. LLM Machines operates the managed inference core locally rather than as a hosted model-inference service.
Before any third party processes Customer personal data or accesses a Customer environment on LLM Machines' behalf, that provider must complete the applicable security, privacy, contractual, transfer, and management review and must be added to this list.
Website and business operations providers
These providers are separate from Customer-data subprocessors. Their exact role may be processor, separate controller, or another service-provider role depending on the service and contract.
| Provider | Service and data | Region | Draft status |
|---|---|---|---|
| GitHub Pages | Static website hosting and public content delivery. GitHub's privacy statement describes service-request and usage data including IP address, requested pages, device or browser information, date and time, and referrer information where provided. | Global; the applicable GitHub entity and transfer path must be confirmed. | In use. Account terms, legal role, retention, transfer, and provider review pending. |
| Google Fonts | Urbanist webfont, loaded only after functional consent. Google receives the IP address, requested URL, user-agent, and referrer information sent with the font request. | Global; processing locations and transfer path under review. | In use only after opt-in. Legal role, retention, transfer, and provider review pending. |
| jsDelivr, operated by Volentio JSD Limited | CDN delivery of the Unicorn Studio runtime after functional consent. jsDelivr and its delivery providers receive IP and browser request information. | United Kingdom and global CDN network. | In use only after opt-in. DPA, transfer, subprocessor, retention, and provider review pending. |
| Unicorn Studio | Background-scene media from assets.unicorn.studio, loaded only after functional consent. Standard request data is sent when the media is fetched. |
Legal entity, jurisdiction, processing locations, and transfer path must be confirmed. | In use only after opt-in. Contract, logging, retention, subprocessor, and provider review pending. |
| Porkbun LLC | Domain and DNS services plus inbound email forwarding for llm-machines.com. It may process business account information, forwarding destinations, email metadata, and message content. |
United States with possible onward transfers. | In use for forwarding. First-pass review complete; account, terms, transfer, retention, monitoring, and security evidence pending. |
| Final business mailbox provider | Receives messages after forwarding, including sender details, message content, and attachments. | Unknown. | Publication blocker: provider, legal role, terms, retention, transfer posture, access, and monitoring must be identified and approved. |
The reviewed website source opens a local email draft and does not submit the form payload through a website form relay. A mail application may save or synchronise a draft before it is sent. The production relay-removal statement remains source-only until a post-deployment browser and network check confirms it.
Resend remains a candidate-only provider and is not listed as active. FormSubmit remains part of the internal exception history until live verification proves its removal.
Hardware suppliers
These suppliers support hardware procurement or manufacturing. They are not Customer-data subprocessors by default. Their classification must change before any authorised support, RMA, diagnostics, logistics, or media-handling workflow gives them Customer personal data or Customer-environment access.
| Supplier | Function | Default access | Draft status |
|---|---|---|---|
| Distributor-backed procurement channel | Infrastructure procurement channel selected for each Order Form to supply the sized Supermicro hardware. The exact contracting distributor and applicable warranty terms are confirmed in the supplier documents and signed Order Form. | No Customer personal data or Customer-environment access by default. | Supplier, not subprocessor. Identification, contracting, RMA, diagnostics, media-handling, and management approval are required for the applicable order. |
| Supermicro | Appliance hardware manufacturer. The contracting entity and warranty coverage are defined by the applicable supplier documents and signed Order Form. | No Customer personal data or Customer-environment access by default. | Supplier/manufacturer, not subprocessor. Warranty, RMA, diagnostics, media-handling, and management approval pending. |
Change notice
LLM Machines will provide written notice before adding or replacing a third party that processes Customer personal data on its behalf, in accordance with the applicable signed DPA. The notice period and objection procedure are those stated in that DPA; this page does not create a separate contractual right.
Material changes to website providers and hardware suppliers will be reflected here, but they are not Customer-data subprocessor changes unless their data-access role changes.
Questions can be sent to privacy@llm-machines.com. The final mailbox-provider and monitoring review must be completed before that address is relied on as the sole rights-request channel.