Sub-processors
Last updated: 12 September 2026
This page lists every third-party service that processes personal data on behalf of Plaithy customers, as required by Article 28 GDPR and §4 of our Data Processing Agreement. We notify customers at least 30 days before any addition or removal — first via the “Upcoming Changes” section below, and a second time as an in-app banner inside the application.
How to read the tier column. It says where a provider sits and whether our routing may send data there without asking you first.
Where we are heading: EU-default routing, with non-EU providers only on your explicit opt-in. The switch for that is built but not yet enabled, so this page describes what happens today, not what we intend. We will update it here, with the 30 days’ notice promised above, before the routing changes.
- EU-defaultEU-hosted or EU-controller — used in the default routing tier, no separate opt-in required.
- Global routingProviders outside the EU that our AI routing may use without a separate unlock while we run your advertising: which one handles a given step depends on the task and on availability. DeepSeek (People’s Republic of China) is part of that routing and has no EU adequacy decision and no Data Privacy Framework; transfers rest on the instrument named in its row and on section 5 of our privacy policy.
Active sub-processors
| Sub-processor | Tier | Purpose | Region | Security certifications |
|---|---|---|---|---|
| Hetzner Online GmbH | EU-default | Primary infrastructure hosting (compute, managed PostgreSQL, object storage, backups; hosts the gVisor code sandbox). Also hosts the lead system that stores contact-form requests from plaith.ai and the transcripts of the website chat and voice assistant (added 12.09.2026). | Falkenstein & Nuremberg, Germany Germany (EU) | ISO/IEC 27001:2022, BSI C5 |
| Qdrant EU-located (self-hosted) — no third-country transfer. | EU-default | Vector database for persistent cross-session Memory (context, workflows, experiences). | EU (self-hosted on Hetzner) Germany (EU) | Inherits Hetzner ISO/IEC 27001 / BSI C5 (self-hosted) |
| Stripe Payments Europe, Ltd. EU contracting party; Standard Contractual Clauses under Stripe's data processing agreement for any transfer to Stripe, Inc. (USA). | EU-default | Subscription billing, payment processing and invoicing (orchestration fee + token pass-through); one-time setup fee and packages of the Performance Team via Stripe Checkout — card and bank details are entered on Stripe's own payment page, we receive only payment status, amount and invoice details (added 12.09.2026). | Ireland (EU); Stripe, Inc. (USA) as group Ireland (EU) | PCI DSS Level 1, ISO/IEC 27001 |
| Resend (Plus Five Five, Inc.) Standard Contractual Clauses under Resend's data processing agreement. | Global routing | Transactional and reporting email (sign-up and billing mails, security and budget alerts, weekly/monthly advertising reports incl. campaign names, spend, leads); internal notification emails about new contact-form requests from plaith.ai, containing the visitor's name, email address and message (added 12.09.2026). | United States United States | — |
| Cloudflare Germany GmbH Standard Contractual Clauses (Module 3). | EU-default | Edge DNS, DDoS protection and HTTPS termination. | Global edge network with EU-only data residency for cached content. Global (EU primary) | ISO/IEC 27001, SOC 2 Type II |
| Mistral AI SAS EU-located (France) — no third-country transfer; no Chapter V instrument required. | EU-default | Optional model inference (EU frontier models) — eligible for the default routing tier. | Paris, France (EU) France (EU) | — |
| Ollama (self-hosted) EU-located / local — no transfer. | EU-default | Local model inference; no external provider receives personal data. | EU (on Plaithy / Hetzner infrastructure) Germany (EU) | Inherits Hetzner ISO/IEC 27001 / BSI C5 (self-hosted) |
| OpenAI Ireland Ltd. / OpenAI OpCo, LLC (USA) Standard Contractual Clauses (Art. 46(2)(c) GDPR) under OpenAI's data processing addendum. | Global routing | Optional model inference (used by the ad-management service through our AI router) — no per-task unlock is required today. | Ireland / United States Ireland (EU) / United States | SOC 2 Type II |
| Anthropic, PBC Standard Contractual Clauses under Anthropic's data processing addendum. | Global routing | Optional model inference (used by the ad-management service through our AI router) — no per-task unlock is required today. | United States United States | SOC 2 Type II |
| Google (Google Ireland Ltd. / Google LLC) EU-US Data Privacy Framework — Google LLC is an ACTIVE participant (dataprivacyframework.gov, covers Google Cloud), plus SCCs (Module 2/3) for any non-DPF transfer. | Global routing | Model inference (Gemini) used by the ad-management service through our AI router — no per-task unlock is required today. Additionally (added 12.09.2026) the chat and voice assistant on the plaith.ai start page: visitors' chat messages are sent to Gemini for answering, and — only after the visitor's explicit click — microphone audio is streamed in real time to Gemini Live (USA). This website use is not optional once the visitor has consented to the assistant. | Ireland / United States Ireland (EU) / United States | ISO/IEC 27001, SOC 2 Type II |
| xAI (X.AI LLC / xAI Corp.) Standard Contractual Clauses under the xAI data processing addendum. | Global routing | Model inference (Grok) used by the ad-management service through our AI router — no per-task unlock is required. | United States United States | — |
| Groq, Inc. Standard Contractual Clauses under the Groq data processing addendum. | Global routing | Model inference (fast inference) used by the ad-management service through our AI router — no per-task unlock is required. | United States United States | — |
| Perplexity AI, Inc. Standard Contractual Clauses under Perplexity's data processing terms. Perplexity may itself route to other US model providers. | Global routing | Web-grounded search and model inference (Sonar) available to our AI router — no per-task unlock is required. | United States United States | — |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) Third-country transfer to the People's Republic of China. There is no EU adequacy decision for China and no Data Privacy Framework; the transfer takes place under DeepSeek's own terms of service. | Global routing | Model inference used by the ad-management service through our AI router — no per-task unlock is required. Data the task needs is transferred to the People's Republic of China. | People's Republic of China China (PRC) | — |
| Tavily, Inc. Standard Contractual Clauses under the provider's data processing terms, where offered. | Global routing | Web search used by the research role of the ad team; receives the search queries written by the model, which can contain campaign and offer wording. | United States United States | — |
| Higgsfield AI Standard Contractual Clauses under the provider's data processing terms, where offered. | Global routing | Generation of advertising images and videos; receives the prompts, ad copy and source images of the creative. | United States United States | — |
| Replicate, Inc. Standard Contractual Clauses under the provider's data processing terms, where offered. | Global routing | Fallback generation of advertising images; receives the prompts and source images of the creative. | United States United States | — |
| Black Forest Labs GmbH EU-located — no third-country transfer. | EU-default | Fallback generation of advertising images (FLUX); receives the prompts and source images of the creative. | Freiburg, Germany (EU) Germany (EU) | — |
| ElevenLabs, Inc. Standard Contractual Clauses under the provider's data processing terms, where offered. | Global routing | Voice-over generation for video ads; receives the spoken script of the ad. | United States United States | — |
Upcoming changes
No pending changes. The list above reflects every sub-processor currently in scope.
Object to a sub-processor
Customers on a paid plan may object to a new sub-processor in writing within the 30-day notice window by emailing hello@plaith.ai. Where a commercially reasonable workaround cannot be agreed, the customer may terminate the affected service for cause as described in the DPA.
Audit trail
This page is generated from config/sub_processors.yaml in our internal repository. Every change is recorded in version control — git history is the canonical audit log.