List of Subprocessors
Last updated: October 2026
Subprocessors engaged by EFFIVIS TECHNOLOGIES S.L. ("Effivis") in its capacity as processor for its customers. This is the list referred to in section 7.1 of the Terms of Service.
1. Authorised subprocessors
| Subprocessor | Purpose | Processing location | Safeguards |
|---|---|---|---|
| Amazon Web Services EMEA S.à r.l. | Hosting, database, storage, OCR (Textract) and language models (Bedrock), as the EU-based alternative for the conversational assistant | Ireland (eu-west-1) | AWS DPA + SCCs |
| Cloudflare, Inc. | DNS, CDN, WAF and DDoS protection | Global, with EU nodes | DPA + SCCs |
| OpenAI Ireland Ltd. | Language models for AI features: document classification and extraction, embeddings and search | Ireland, with processing in the US | EU-US DPF + SCCs (Module 2) |
| Anthropic Ireland Limited | Language models behind the conversational assistant (WhatsApp and phone) | Ireland, with processing in the US | Anthropic DPA + SCCs (Module 2) + EU-US DPF |
| Stripe Payments Europe Ltd. | Subscription billing and payment processing | Ireland, with processing in the US | Stripe DPA + SCCs |
| Google Ireland Ltd. | Vertex AI: the voice model that answers calls in real time, and language models; Google Analytics 4 on the website; Drive / OAuth integrations | Vertex AI: Madrid (europe-southwest1), no transfer outside the EU. Analytics and Drive / OAuth integrations: Ireland, with processing in the US. | Vertex AI: processing within the EEA, no international transfer. Other services: DPA + SCCs |
| DIDWW Ireland Ltd (VAT IE9712233V) | Voice and SMS carrier: numbering, SIP interconnection and termination of calls placed from the platform and the mobile app; delivery of text messages (verification codes and appointment notices) | Ireland (25 North Wall Quay, Dublin 1, D01 H104) | Processing within the EEA: no international transfer |
| Functional Software, Inc. (Sentry) | Error and performance monitoring of the web platform and the mobile app | EU ingestion and storage (de.sentry.io), US company | DPA + SCCs |
| 650 Industries, Inc. (Expo) | Delivery of push notifications for the iOS mobile app (gateway to Apple APNs) | United States | EU-US DPF |
| Zendesk, Inc. | Support for the Customer: tickets sent to support@effivis.com | United States; processing may be global | BCR + EU-US DPF + SCCs (Module 3) |
SCCs = Standard Contractual Clauses approved by the European Commission (Decision 2021/914).
DPA = Data Processing Agreement (GDPR Art. 28).
EU-US DPF = EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023).
BCR = Binding Corporate Rules (GDPR Art. 47).
2. Changes to the list and right to object
Effivis will notify the Customer of any addition or replacement of a subprocessor 30 days in advance. The Customer may object; in that case either party may terminate the Service.
To receive these notifications or request a copy of the safeguards applicable to any transfer, email privacy@effivis.com.