Subprocessors
Last updated: TODO: effective date
TODO: to be completed by a lawyer. This is a working template, not a binding text. A lawyer must review and complete it before sales start.
List
KAPSA runs on our own server in the EU. Below are the third parties that process personal data when we provide the service.
AI providers you connect (e.g. Anthropic, OpenAI) are not our subprocessors: they are your vendors under your agreement with them.
| Subprocessor | Purpose | Processing location | Safeguards |
|---|---|---|---|
| Own server in the EU TODO: data centre operator | Hosting of the app, database and files | EU TODO: country | Art. 28 GDPR agreement [TODO] |
| Off-site backups TODO: provider | Encrypted backups | EU [TODO] | [TODO] |
| E-mail provider TODO: Resend / SMTP in the EU, not chosen yet | Transactional e-mail (verification, password reset, invitations, trial) | [TODO] | [TODO] |
| Stripe Payments Europe, Ltd. | Payments and subscriptions | Ireland (EU), transfers under the Stripe DPA | Stripe DPA, standard contractual clauses |
| TODO: Peppol e-invoicing provider, e.g. SuperFaktúra | Issuing and delivering invoices | Slovakia (EU) [TODO] | [TODO] |