List of Sub-Processors
| Sub-Processor | Location | Purpose of Processing | Processing Location | DPA Status |
|---|---|---|---|---|
| Google Cloud Platform | USA | Infrastructure (VM, Functions, Storage, LiveKit, n8n) | Zurich, Switzerland (europe-west6) | ✅ Standard CDPA |
| Supabase Inc. | USA | Database, Authentication | Ireland, EU (eu-west-1) | ✅ Standard DPA |
| Anthropic Ireland Ltd. | Ireland | AI Text Generation (Claude API) | USA | ✅ DPA with SCCs |
| Deepgram Inc. | USA | Speech-to-Text (Transcription) | EU-Endpoint | ✅ DPA with SCCs |
| Cloudflare Inc. | USA | CDN, Image Delivery, Video Streaming | Global | ✅ EU-U.S. DPF |
| ARBICHAT, S.L. (Zernio/Late.dev) | Spain (EU) | Social Media Publishing | EU | ✅ DPA |
| OpenRouter Inc. | USA | LLM-Routing/Failover | USA | ✅ DPA in ToS |
| Vercel Inc. | USA | Blog-Frontend Hosting | EU-Region | ✅ EU-U.S. DPF |
Change Notice
In case of changes to this list, all customers will be informed immediately via the ACP Cockpit (according to DPA § 7 — with a 14-day objection period from the date of notification).
All listed sub-processors have a valid Data Processing Agreement (DPA) with appropriate data protection guarantees.
Contact
Questions about data protection: info@magnet-xs.com