Sub-processors
The third parties who help us process personal data on your behalf, and how we safeguard it.
Last updated: 2026-09-27
A sub-processor is a third party we engage to help process personal data on your behalf — for example a hosting provider, an email delivery service, or an AI provider.
When we add a new sub-processor, or materially change how an existing one processes data, we notify workspace owners by email at least 14 days in advance, with a right to object.
Customer-authored dataset integrations may send data to hosts the customer configures; those are the customer's own processors.
| Name | Service | Data | Region | Safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Compute, storage, network (all self-hosted software below runs on this) | Everything — all platform data at rest and in process memory | Germany, Finland (EU/EEA) | EU processing, no transfer |
| Cloudflare, Inc. | Edge/CDN (Pages), object storage (R2), Web Analytics beacon | Frontend assets, request metadata, workflow artifacts, database/cluster backups, app pageview counts | Global edge; storage in default jurisdiction (not EU-committed) | DPA + Standard Contractual Clauses (transfer basis under confirmation) |
| Postmark (Wildbit/ActiveCampaign) | Transactional email (including one-time passcodes) | Recipient email address, message content | United States | DPA + Standard Contractual Clauses + transfer impact assessment |
| Resend | Site password-reset email; newsletter confirmation email | Recipient email address, message content | United States | DPA + Standard Contractual Clauses (under confirmation) |
| Stripe | Payments | Payment/billing details, name, email | EU/US | Stripe's standard DPA + Standard Contractual Clauses |
| Google — Gemini API | AI features (document analysis, auto-quotation, voice) | Uploaded documents, inbound emails/attachments, live audio — may contain personal data | United States (global endpoint, no EU region configured) | DPA + Standard Contractual Clauses + transfer impact assessment; planned: move to a Vertex AI EU region with zero-retention terms |
| Google — Maps Geocoding | Address geocoding | Home/business addresses of people, companies, schools | United States (server-side call) | DPA + Standard Contractual Clauses (under confirmation) |
| Google — OAuth/Workspace APIs | Customer-connected integrations | Whatever the customer's connected Google account exposes | Customer-dependent | Customer-authorized OAuth; Google's own terms |
| Google — Fonts/Calendar | Booking-demo calendar embed (fonts are self-hosted since 2026-09-28) | Visitor IP address and booking form data, only when the visitor opens the calendar | United States | Click-to-load: the calendar is fetched only after the visitor chooses to open it; no Google font requests (fonts self-hosted) |
| Google — Analytics (GA4) | Web analytics on keix.com | Usage data, pseudonymous client identifiers, visitor IP address | United States | Loaded only after the visitor consents to measurement (Consent Mode v2, denied by default, since 2026-09-28). Transfer basis: Data Privacy Framework/Standard Contractual Clauses (to confirm) |
| Anthropic | AI features | Prompts/content sent to Claude by AI-assisted features | United States (global endpoint, no EU region configured) | DPA + Standard Contractual Clauses + transfer impact assessment; planned: move to a Vertex AI EU region with zero-retention terms |
| Meta (WhatsApp Business API, Facebook, Instagram) | Customer-connected messaging integrations | Message content and contact identifiers the customer routes through Meta's APIs | Customer-dependent | Customer-authorized; Meta's own terms |
| Telegram | Customer-connected bot messaging | Message content and Telegram identifiers the customer routes through the bot | Customer-dependent | Customer-authorized; Telegram's own terms |
| BulkGate | SMS | Recipient phone number, message content | Czech Republic | DPA (EU-to-EU, no transfer expected) |
| Fathom | Call transcripts and AI summaries, customer-connected | Call recordings, transcripts, participant names | United States | Customer-authorized OAuth; DPA + Standard Contractual Clauses (under confirmation) |
| Mapbox | Map tiles | Location coordinates rendered in the UI; typically no direct personal-data payload | United States | DPA (under confirmation) |
| Apple / Google Wallet | Wallet passes | Cardholder name, card/pass identifiers | United States | Apple's/Google's standard pass-issuer terms |
| Brave | Web search for the AI assistant's "find a dataset" tool | The user's search query text, which may contain personal data the user typed | United States | DPA (under confirmation) |
| Chatwoot | Support chat, self-hosted | Support conversation content, contact identifiers | Germany, Finland (EU/EEA), hosted on Hetzner | Self-hosted, no transfer |
| Zitadel | Identity/authentication, self-hosted | Login identity, session and permission data | Germany, Finland (EU/EEA), hosted on Hetzner | Self-hosted, no transfer |
| SigNoz | Observability, self-hosted | Traces/logs/metrics, may include request metadata | Germany, Finland (EU/EEA), hosted on Hetzner | Self-hosted, no transfer |
| Typesense / Postgres / Redis | Search index / relational store / cache, self-hosted | All indexed and cached platform data | Germany, Finland (EU/EEA), hosted on Hetzner | Self-hosted, no transfer |
| mailinput.com | Email deliverability verification | The email address the user is typing, sent live to a third party as they type | Unknown — under verification | DPA (under confirmation) |
| Zoom | Archimede product only, customer-connected | Meeting/participant data the customer's Archimede workspace exchanges with Zoom | Customer-dependent | Customer-authorized OAuth |
| Customer-connected OAuth integrations | GitHub, LinkedIn, Microsoft, HubSpot, Pipedrive, ClickUp, Fathom, GitLab, Sentry, Stripe, Airtable, PagerDuty, Klaviyo, Salesforce, Bitbucket, Mailchimp, Linear, Shopify | Whatever the customer's connected account exposes; data flows only when the customer connects it | Customer-dependent | Customer-authorized OAuth; each provider's own terms |