Sub-Processors

Current list of third-party sub-processors used by Blue to provide the Service.

Last updated: April 12, 2026

Blue engages the following third-party sub-processors to assist in providing the Service. This page is the canonical and authoritative list of sub-processors referenced by our Data Processing Agreement and Business Associate Agreement.

Changes to this list are subject to the notification and objection procedures set forth in Section 4.2 of the Data Processing Agreement.

Current Sub-Processors

Sub-ProcessorCategoryPurposeData Location
HetznerInfrastructureHosting and computeEU (Germany)
Amazon Web ServicesInfrastructureSES email deliveryEU (Frankfurt)
BackblazeInfrastructureFile storageEU
CloudflareInfrastructureDNS, CDN, securityGlobal
OpenAIAI ServicesAI featuresEU endpoints
AnthropicAI ServicesContent scanningEU endpoints
StripePaymentsPayment processingUS
AppleMobileiOS app distribution and App Store servicesUS
GoogleMobileGoogle Play Store, Firebase Push NotificationsUS
TelegramTeam OperationsInternal team notificationsGlobal

PHI-Authorized Sub-Processors

The following sub-processors are authorized to process Protected Health Information (PHI) under a Business Associate Agreement. All other sub-processors listed above are not authorized to process PHI.

Sub-ProcessorPurpose
HetznerHosting and compute
Amazon Web ServicesSES email delivery
BackblazeFile storage
CloudflareDNS, CDN, transit security

Changes

Blue will notify customers of changes to this sub-processor list with at least 30 days’ prior notice, in accordance with the procedures set forth in the Data Processing Agreement. Customers may object to the appointment of a new sub-processor within 14 days of receiving such notice.

For questions about our sub-processors, contact [email protected].