Effective from March 3, 2026
Gunzenhausen, Germany
Hosting of application servers, reverse proxies, and infrastructure components used to deliver the core platform.
Processing location: eu-central
Transfer basis: EU processing / no third-country transfer by default
DPA status: DPA available / to be maintained in hosting records
Boston, MA, USA
Core database, authentication, storage, and real-time syncing for the product backend, telemetry, and referral tracking.
Processing location: eu-central
Transfer basis: EU Standard Contractual Clauses (SCC)
DPA status: Standard-DPA available via Supabase console
Paris, France
Processing of user prompts and model outputs when Mistral-based AI functions are requested.
Processing location: EU
Transfer basis: EU processing / no third-country transfer by default
DPA status: Standard-DPA available
San Francisco, CA, USA
Processing of user prompts and model outputs when ChatGPT-based AI functions are requested.
Processing location: USA – us-west-2
Transfer basis: EU Standard Contractual Clauses (SCC) + OpenAI Data Processing Addendum
DPA status: Standard-DPA available (SCC) / in place
San Francisco, CA, USA
Processing of user prompts and model outputs when Claude-based AI functions are requested.
Processing location: USA – us-west-2
Transfer basis: EU Standard Contractual Clauses (SCC)
DPA status: Standard-DPA available / in place
Mountain View, CA, USA
Processing of user prompts and model outputs when Gemini-based AI functions are requested.
Processing location: USA / global Google Cloud regions
Transfer basis: EU Standard Contractual Clauses (SCC)
DPA status: Standard-DPA available
San Francisco, CA, USA
Processing of user prompts and model outputs when Grok-based AI functions are requested.
Processing location: USA
Transfer basis: EU Standard Contractual Clauses (SCC) or equivalent contractual safeguards
DPA status: DPA status to be documented
South San Francisco, CA, USA
Payment orchestration (checkout sessions, subscriptions, invoices) including card data tokenization and webhook delivery.
Processing location: USA – us-west-2
Transfer basis: EU Standard Contractual Clauses (SCC)
DPA status: Standard-DPA accepted online
San Francisco, CA, USA
DNS and CDN edge protection for the public web properties and API gateway.
Processing location: Global edge network
Transfer basis: EU Standard Contractual Clauses (SCC)
DPA status: Standard-DPA available