Sub-processors
Last updated: Continuously — see git history
This page lists every third-party service that processes personal data on behalf of Plaithy customers, as required by Article 28 GDPR and §4 of our Data Processing Agreement. We notify customers at least 30 days before any addition or removal — first via the “Upcoming Changes” section below, and a second time as an in-app banner inside the application.
How to read the tier column. It says where a provider sits and whether our routing may send data there without asking you first.
Where we are heading: EU-default routing, with non-EU providers only on your explicit opt-in. The switch for that is built but not yet enabled, so this page describes what happens today, not what we intend. We will update it here, with the 30 days’ notice promised above, before the routing changes.
- EU-defaultEU-hosted or EU-controller — used in the default routing tier, no separate opt-in required.
- Global routingProviders outside the EU that our AI routing may use without a separate unlock while we run your advertising: which one handles a given step depends on the task and on availability. DeepSeek (People’s Republic of China) is part of that routing and has no EU adequacy decision and no Data Privacy Framework; transfers rest on the instrument named in its row and on section 5 of our privacy policy.
Active sub-processors
| Sub-processor | Tier | Purpose | Region | Security certifications |
|---|---|---|---|---|
| Hetzner Online GmbH | EU-default | Primary infrastructure hosting (compute, managed PostgreSQL, object storage, backups; hosts the gVisor code sandbox). Also hosts the lead system that stores contact-form requests from plaith.ai and the transcripts of the website chat and voice assistant (added 12.09.2026). | Falkenstein & Nuremberg, Germany Germany (EU) | ISO/IEC 27001:2022, BSI C5 |
| Qdrant EU-located when self-hosted — no third-country transfer. [VERIFY if Qdrant Cloud] | EU-default | Vector database for persistent cross-session Memory (context, workflows, experiences). | EU (self-hosted on Hetzner) [VERIFY] Germany (EU) [VERIFY] | Inherits Hetzner ISO/IEC 27001 / BSI C5 when self-hosted [VERIFY] |
| Stripe Payments Europe, Ltd. EU contracting party; SCCs (Module 3) for any incidental US transfer; EU-US DPF [VERIFY]. | EU-default | Subscription billing, payment processing and invoicing (orchestration fee + token pass-through); one-time setup fee and packages of the Performance Team via Stripe Checkout — card and bank details are entered on Stripe's own payment page, we receive only payment status, amount and invoice details (added 12.09.2026). | Ireland (EU); Stripe, Inc. (USA) as group Ireland (EU) | PCI DSS Level 1, ISO/IEC 27001 |
| Resend (Plus Five Five, Inc.) Standard Contractual Clauses (Module 3) [VERIFY]; EU-US Data Privacy Framework status [VERIFY]. | Global routing | Transactional and reporting email (sign-up and billing mails, security and budget alerts, weekly/monthly advertising reports incl. campaign names, spend, leads); internal notification emails about new contact-form requests from plaith.ai, containing the visitor's name, email address and message (added 12.09.2026). | United States United States | SOC 2 Type II [VERIFY] |
| Cloudflare Germany GmbH Standard Contractual Clauses (Module 3). | EU-default | Edge DNS, DDoS protection and HTTPS termination. | Global edge network with EU-only data residency for cached content. Global (EU primary) | ISO/IEC 27001, SOC 2 Type II |
| Mistral AI SAS EU-located (France) — no third-country transfer; no Chapter V instrument required. | EU-default | Optional model inference (EU frontier models) — eligible for the default routing tier. | Paris, France (EU) France (EU) | [VERIFY] |
| Ollama (self-hosted) EU-located / local — no transfer. | EU-default | Local model inference; no external provider receives personal data. | EU (on Plaithy / Hetzner infrastructure) Germany (EU) [VERIFY] | Inherits Hetzner ISO/IEC 27001 / BSI C5 (self-hosted) |
| OpenAI Ireland Ltd. / OpenAI OpCo, LLC (USA) SCCs (Art. 46(2)(c), Module 2/3) + Transfer Impact Assessment (per OpenAI supplier DPA). EU-US DPF participation not confirmed on the official list [VERIFY at dataprivacyframework.gov]. | Global routing | Optional model inference (used by the ad-management service through our AI router) — no per-task unlock is required today. | Ireland / United States Ireland (EU) / United States | SOC 2 Type II |
| Anthropic, PBC SCCs (Module 2/3) + Transfer Impact Assessment. EU-US DPF: stated participant per Anthropic Privacy Center (active ~2026) [VERIFY at dataprivacyframework.gov]. | Global routing | Optional model inference (used by the ad-management service through our AI router) — no per-task unlock is required today. | United States United States | SOC 2 Type II |
| Google (Google Ireland Ltd. / Google LLC) EU-US Data Privacy Framework — Google LLC is an ACTIVE participant (dataprivacyframework.gov, covers Google Cloud), plus SCCs (Module 2/3) for any non-DPF transfer. | Global routing | Model inference (Gemini) used by the ad-management service through our AI router — no per-task unlock is required today. Additionally (added 12.09.2026) the chat and voice assistant on the plaith.ai start page: visitors' chat messages are sent to Gemini for answering, and — only after the visitor's explicit click — microphone audio is streamed in real time to Gemini Live (USA). This website use is not optional once the visitor has consented to the assistant. | Ireland / United States Ireland (EU) / United States | ISO/IEC 27001, SOC 2 Type II |
| xAI (X.AI LLC / xAI Corp.) SCCs (Module 2/3) + Transfer Impact Assessment, per the xAI Data Processing Addendum. No EU-US DPF established [VERIFY]. | Global routing | Optional model inference (Grok; only if the customer enables xAI as a provider) — no per-task unlock is required today. | United States United States | [VERIFY] |
| Groq, Inc. SCCs (Module 2/3) + Transfer Impact Assessment, via the Groq DPA. EU-US DPF [VERIFY]. | Global routing | Optional model inference (fast inference; only if the customer enables Groq as a provider) — no per-task unlock is required today. | United States United States | [VERIFY] |
| Perplexity AI, Inc. SCCs (Module 2/3) + Transfer Impact Assessment. EU-US DPF claimed by Perplexity but not independently verified [VERIFY]. Note: Perplexity may itself route to other US model providers. | Global routing | Optional web-grounded search & model inference (Sonar; only if the customer enables Perplexity as a provider) — no per-task unlock is required today. | United States United States | [VERIFY] |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) ⚠️ NO EU adequacy decision and NO Data Privacy Framework for the PRC; no SCC-based Chapter V instrument is realistically available. Engaged SOLELY under the Art. 49(1)(a) GDPR derogation — the data subject's explicit, informed consent to the transfer to China — third-country transfer to the People's Republic of China; no adequacy decision and no Data Privacy Framework. Never part of the default tier. | Global routing | Optional model inference (used by the ad-management service through our AI router) — third-country transfer to the People's Republic of China; no adequacy decision and no Data Privacy Framework. | People's Republic of China China (PRC) | [VERIFY] |
| Tavily, Inc. Standard Contractual Clauses [VERIFY]. | Global routing | Web search used by the research role of the ad team; receives the search queries written by the model, which can contain campaign and offer wording. | United States United States | [VERIFY] |
| Higgsfield AI Standard Contractual Clauses [VERIFY]. | Global routing | Generation of advertising images and videos; receives the prompts, ad copy and source images of the creative. | United States [VERIFY] United States [VERIFY] | [VERIFY] |
| Replicate, Inc. Standard Contractual Clauses [VERIFY]. | Global routing | Fallback generation of advertising images; receives the prompts and source images of the creative. | United States United States | [VERIFY] |
| Black Forest Labs GmbH EU-located — no third-country transfer. | EU-default | Fallback generation of advertising images (FLUX); receives the prompts and source images of the creative. | Freiburg, Germany (EU) Germany (EU) | [VERIFY] |
| ElevenLabs, Inc. Standard Contractual Clauses [VERIFY]. | Global routing | Voice-over generation for video ads; receives the spoken script of the ad. | United States United States | SOC 2 Type II [VERIFY] |
Upcoming changes
No pending changes. The list above reflects every sub-processor currently in scope.
Object to a sub-processor
Customers on a paid plan may object to a new sub-processor in writing within the 30-day notice window by emailing hello@plaith.ai. Where a commercially reasonable workaround cannot be agreed, the customer may terminate the affected service for cause as described in the DPA.
Audit trail
This page is generated from config/sub_processors.yaml in our public repository. Every change is recorded in version control — git history is the canonical audit log.