Subprocessors
Version 2026-10-14
These companies process personal data for Plenetic when we provide the service. Changes are announced at least 30 days in advance, as described in the Data Processing Agreement. Mailbox and calendar providers that a user connects are that user’s own providers and are not listed here.
| Subprocessor | Role | Location |
|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, databases, file storage, transactional email (Amazon SES), and transcription and speech for voice input (Amazon Transcribe, Amazon Polly) | EU, region eu-north-1 (Stockholm) |
| Stripe Payments Europe, Ltd. | Payment processing for paid plans | Ireland; transfers to Stripe, Inc. (US) under the EU–US Data Privacy Framework and standard contractual clauses |
| OpenRouter | Routes AI model requests to OpenAI and Azure only, with no fallback to other hosts. Each request from staging and production sets zero data retention and denies provider data collection. | EU API for prompts and answers (eu.openrouter.ai). US company (New York); EU standard contractual clauses. Account data may be processed in the US |
| OpenAI | Runs the AI models behind the assistant, reached only through OpenRouter. Each request sets zero data retention. OpenRouter does not guarantee OpenAI’s own retention | EU/EEA for prompts and answers sent through OpenRouter’s EU API. US company |
| Microsoft Azure | Runs OpenAI models in the EU via Azure OpenAI, reached only through OpenRouter. Each request sets zero data retention. OpenRouter does not guarantee Microsoft’s own retention | EU Azure regions, reached through OpenRouter’s EU API. US-group company |
| Elestio | Managed hosting of our self-hosted Umami analytics (marketing pages, only after consent) and of the operations trace store for AI prompts (Langfuse, 14 days) | Servers of Hetzner Online GmbH in Nürnberg, Germany |
Transactional email is sent only through Amazon SES. The current list is also linked from the privacy notice and the DPA. DPA · Privacy