Subprocessors

netcup GmbH

Purpose: application and PostgreSQL/pgvector hosting.

Location: Germany.

Resend

Purpose: magic-link, checkout and contact email delivery.

Processing can occur outside the EEA. Applicable provider safeguards must be reviewed against the current service terms.

Stripe

Purpose: checkout, subscriptions, invoices, payment methods, tax calculation and customer portal.

Processing can occur inside and outside the EEA under Stripe's applicable contractual safeguards.

OpenRouter

Purpose: routing chat and embedding requests to selected model providers.

OpenRouter and downstream providers can process data outside the EEA. Use must match the published privacy, routing and logging settings.

Anthropic / OpenAI

Purpose: direct chat processing; OpenAI can also provide embeddings.

These providers are technically configurable but may be enabled in production only after documented review of the contracting entity, processing locations, DPA, subprocessors and transfer mechanism.

cortecs.ai

Purpose: European routing for chat and embedding requests.

EU-native routing restricts requests to the designated European path. Customer-selectable EU-restricted processing is recorded as a future requirement, not a current product capability.

Change notice

Material subprocessor changes are announced to the registered business email before taking effect. Customers may object for substantial data-protection reasons.