Subprocessors
Version 2026-10-02
Draft. This document has not yet been reviewed by a lawyer and may change before the service launches.
These providers process personal data on our behalf (Art. 28 GDPR). We announce a new subprocessor at least 30 days before it starts, by email to organisation owners; you can object as described in the Data Processing Agreement.
| Provider | Purpose | Location |
|---|---|---|
| Vultr Holdings LLC | Servers, database, file storage and backups | Amsterdam, the Netherlands |
| OpenAI, L.L.C. | Asking monitored questions to ChatGPT | United States |
| Google LLC (Gemini API) | Asking monitored questions to Gemini | United States / EU |
| Anthropic, PBC | Asking monitored questions to Claude | United States |
| Mollie B.V. | Payments and direct debits | the Netherlands |
| Mailgun Technologies, Inc. (EU region) | Sending account and notification emails | European Union |
| Functional Software, Inc. (Sentry, EU region) | Error reports | European Union |
AI providers receive the text of monitored questions and return answers; they do not receive account data. We use their business APIs, under which submitted data is not used to train their models.