Recht · genehmigt · EN-APPROVED-2026-03-29
Subprocessors
Namensraum legal.subprocessors. Zuletzt aktualisiert March 29, 2026 · Version 1.0. Status APPROVED. Englisch ist maßgeblich. Andere Gebietsschemata sind nicht genehmigt.
Maßgeblich ist der englische Rechtstext. Andere Sprachen sind eine Komfortschicht, bis ein Freigabeeintrag für das Gebietsschema vorliegt.
5. Sub-Processors
The Controller authorizes the use of the following sub-processors. Changes to this list will be notified 30 days in advance.
| Sub-Processor | Service | Location | Data Processed |
|---|---|---|---|
| Supabase Inc. | Database, Auth, Storage | EU (Frankfurt) | All platform data |
| Railway Corp. | API Hosting | US (Oregon) | API requests, temp processing |
| Stripe Inc. | Payment Processing | US | Payment method, billing info |
| Anthropic Inc. | LLM Provider (Claude) | US | Twin prompts, KB chunks (no PII after redaction) |
| OpenAI Inc. | LLM Provider (GPT) | US | Twin prompts, KB chunks (no PII after redaction) |
| Vercel Inc. | Frontend Hosting | Global CDN | Static assets, edge routing |
| Resend (Plus Five Five, Inc.) | Transactional Email | US | Recipient email, invite and notification content |
| Cloudflare, Inc. | CDN and cookieless analytics | Global | IP-derived page metrics (cookieless, with consent) |
| PostHog Inc. | Product Analytics | EU (Frankfurt) | Usage events (with consent) |
| Firecrawl (Mendable, Inc.) | Public website scan | US | Public company URLs and pages (onboarding scan) |
| Functional Software (Sentry) | Error Monitoring | US | Error traces, stack traces |
| Novu Co. | Notifications | US | Email addresses, notification payloads |
| Upstash Inc. | Redis Cache | EU/US | Session tokens, rate limit counters |