Sub-processors
Last updated: July 2026
A sub-processor is a third party we engage to help deliver the service under Art. 28 GDPR. We keep them to a minimum and list them here by category. The current list of named entities, with legal name and registered office, is provided in the DPA and available on request.
| Category | Purpose | Location |
|---|---|---|
| Cloud infrastructure provider | Hosting and compute for the service, under DPA | EU region |
| Transactional email provider | Sending service and account communications | EU |
| Billing / payment provider (managed plans) | Invoicing and payment processing | EU |
| Confidential-computing provider (optional) | Only for the Confidential option; covered by SCC | Outside EU, under SCC |
In the on-premise configuration there are no sub-processors: everything runs on your own infrastructure. In the default EU configuration, all sub-processors operate within the EU. The Confidential option is the only case in which processing may take place outside the EU, and only under Standard Contractual Clauses.
Changes and right to object
We give advance notice before adding or replacing any sub-processor. You may object to a change on reasonable data-protection grounds; if we cannot accommodate your objection, you may terminate the affected service. The named, up-to-date list is maintained in the DPA — to receive it, write to us at info@privateai24.com.