This English version is provided for convenience. The Spanish version is the one that applies.
Xeneural does not operate its own data centres. To provide XEN it uses the providers listed below, each under a contract that obliges them to process the data only according to our instructions, with security measures equivalent to ours and with incident notification. This list is the one incorporated into the Data Processing Agreement.
Change notice. We publish here any addition or change with at least thirty (30) days' notice and communicate it by email to the customers who subscribe at privacy@xeneural.com. The customer may object in writing within that period; if the objection is reasonable and we cannot offer an alternative, it may terminate the contract without penalty with a proportional refund of any amount paid in advance.
1. Subprocessors that process Customer Content
| Subprocessor | Purpose | Data it processes | Processing location | Certifications |
|---|---|---|---|---|
| Google LLC (Google Cloud) | Application hosting and compute | All content in transit through the application | United States | ISO/IEC 27001, 27017, 27018, 27701; SOC 2 |
| Google LLC (authentication) | User identity and authentication | Email, name, safeguarded credentials | United States | ISO/IEC 27001; SOC 2 |
| MongoDB, Inc. | Managed database | Customer Content and account data | United States | ISO/IEC 27001, 27017, 27018; SOC 2 |
| Cloudflare, Inc. | Document and image storage, edge network, abuse protection | Customer documents and files, images | Global network with storage in the United States | ISO/IEC 27001, 27018, 27701; SOC 2 |
| Google LLC (Gemini) | Language model for XENI | Limited context of the query and of the active company | Google Cloud global infrastructure | ISO/IEC 27001, 27017, 27018, 42001; SOC 2 |
| Resend, Inc. | Transactional email delivery (notices, verification, acknowledgements, vouchers) | Email addresses, names and content of the messages sent | United States | SOC 2 Type II |
| Nubefact S.A.C. | Electronic services operator for issuing vouchers before SUNAT | Data of the vouchers issued by the Customer (RUC, company name, amounts) | Peru | ISO/IEC 27001 |
| Google Workspace (Google LLC) | Corporate email and support documents | Correspondence with the Customer | United States | ISO/IEC 27001; SOC 2 |
The artificial intelligence model provider (Google) is contracted on paid terms that exclude the use of Customer Content to train its models. The Customer's administrator can disable XENI for its entire company.
2. History
| Date | Change |
|---|---|
| November 2025 | First version |
| 2026-09-28 | Removal of Anthropic, Xeneural LLC and Expo; Gemini is now provided through Google Cloud |
| 2026-10-09 | Removal of the list of providers that do not process Customer Content; the AI provider is described by its contracting terms |
Effective since September 28, 2026. Earlier versions are kept and provided on request at legal@xeneural.com.