Sub-processors
Last updated 13 July 2026. These are the vendors we use to deliver Kvix. Listed in line with GDPR Article 28(2). The Data Processing Agreement governs how they handle data on our behalf.
| Sub-processor | Role | Where | Data shared |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting infrastructure (RDS, S3, SES) | Luxembourg (region: eu-west-1, Ireland) | All application data at rest; inbound and outbound email; attachments. |
| Anthropic PBC | Generative AI (primary provider for ticket analysis and replies) | United States (EU SCCs in place) | Ticket subject and message body content submitted to the model for inference. No data is used to train Anthropic models. |
| OpenAI Ireland Ltd. | Embeddings (vector representations of tickets and knowledge-base articles) | Ireland | Subject and body text sent for embedding. No training opt-in. |
| Stripe Payments Europe Ltd. | Billing and subscription management | Ireland | Billing email, payment method tokens, invoice metadata. |
| Functional Software Inc. (Sentry) | Error tracking | United States (EU SCCs in place) | Stack traces, tenant identifiers, user id, redacted request metadata. `send_default_pii` is off; no message bodies are sent. |
| Hetzner Online GmbH | Hosting infrastructure (application servers) | Germany | Application code and runtime; no application data at rest. |
Changes to this list
Before adding a new sub-processor we update this page and send notice to customer admins via email. If you object to a new sub-processor you have 30 days to terminate the subscription without penalty, per §7 of the DPA.
Transfers outside the EU/EEA
Two of the sub-processors above are headquartered outside the EU/EEA (Anthropic, Sentry — both US). For those, transfers rely on the European Commission's Standard Contractual Clauses (Decision 2021/914) plus additional supplementary measures as required by the Schrems II ruling. The list of measures (in- transit + at-rest encryption, contractual no-access by US government except via valid legal process) is documented in the DPA Annex.
Questions
Reach us at [email protected].