Sub-processors
Last updated 6 September 2026. These are the vendors we use to deliver Kvix. Listed in line with GDPR Article 28(2). The Data Processing Agreement governs how they handle data on our behalf.
| Sub-processor | Role | Where | Data shared |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting infrastructure (RDS, S3, SES) | Luxembourg (region: eu-west-1, Ireland) | All application data at rest; inbound and outbound email; attachments. |
| Anthropic PBC | Generative AI (primary provider for ticket analysis and replies) | United States (EU SCCs in place) | Ticket subject and message body content submitted to the model for inference. No data is used to train Anthropic models. |
| OpenAI Ireland Ltd. | Embeddings (vector representations of tickets and knowledge-base articles) | Ireland | Subject and body text sent for embedding. No training opt-in. |
| Stripe Payments Europe Ltd. | Billing and subscription management | Ireland | Billing email, payment method tokens, invoice metadata. |
| Functional Software Inc. (Sentry) | Error tracking | United States (EU SCCs in place) | Stack traces, tenant identifiers, user id, redacted request metadata. `send_default_pii` is off; no message bodies are sent. |
| Hetzner Online GmbH | Hosting infrastructure (application servers) | Germany | Application code and runtime; no application data at rest. |
Changes to this list
Before adding a new sub-processor we update this page and send notice to customer admins via email. If you object to a new sub-processor you have 30 days to terminate the subscription without penalty, per §7 of the DPA.
Transfers outside the EU/EEA
Two of the sub-processors above are headquartered outside the EU/EEA (Anthropic, Sentry — both US). For those, transfers rely on the European Commission's Standard Contractual Clauses (Decision 2021/914) plus additional supplementary measures as required by the Schrems II ruling. The list of measures (in- transit + at-rest encryption, contractual no-access by US government except via valid legal process) is documented in the DPA Annex.
Questions
Reach us at [email protected].