Sub-processors
Last updated: 2026-09-09. This list is referenced by our Privacy Policy and Data Processing Agreement.
BMAsia Limited (Hong Kong), the data controller for Beat Breeze, uses the following third-party sub-processors to provide the service. Each is engaged for the stated function. Applicable contracts, processing instructions, and transfer safeguards are reviewed as part of BMAsia's vendor governance.
Logto is the active identity provider for Beat Breeze account sign-in. The paired Box Player uses a device credential instead and does not sign into Logto. The production Logto tenant is in the EU; Silverhand Inc., the provider, is a U.S. company.
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Silverhand Inc. (Logto Cloud) | Authentication and account identity (sign-in, organisations, invitations, sessions, and MFA) | Logto Cloud EU tenant (Silverhand Inc. is a U.S. company) |
| Stripe, Inc. | Payment processing, subscriptions, and invoicing | United States / global |
| Cloudflare, Inc. (R2) | Audio, image, and video file storage and delivery | Global edge network |
| Render Services, Inc. | Application hosting and PostgreSQL database | Singapore (primary region) |
| Anthropic, PBC | User-initiated Music Director chat and related AI assistance | United States |
| OpenRouter, Inc. / configured model-hosting providers (DigitalOcean, Streamlake, GMICloud) | AI text and curation using DeepSeek models, including automatic Music Director suggestion copy derived from aggregated venue playback actions when that feature is enabled | United States / configured provider processing region (varies by endpoint) |
| Mureka | AI music composition (invoked explicitly) | United States / international |
| fal.ai (Features & Labels, Inc.) | AI image and video generation (invoked explicitly) | United States |
| Google LLC | Text-to-speech voice generation (invoked explicitly); OAuth sign-in | United States / global |
| Resend, Inc. | Transactional email delivery (receipts, trial and billing notices) | United States |
Changes to this list
We update this page before engaging a new sub-processor that handles personal data. Customers with a signed DPA can request advance notice of additions — see the Data Processing Agreement.
BMAsia assesses the requirements that apply to cross-border transfers from Thailand and uses contractual or other recognised transfer safeguards where they are required.