Question 1

Where can I see the full list of sub-processors?

Accepted Answer

Right here on this page, and at [/legal/sub-processors](https://keloa.ai/legal/sub-processors). The table above is the source of truth and is updated whenever a sub-processor is added or changed.

Question 2

Are all sub-processors inside the EU?

Accepted Answer

Most are. Hetzner Cloud (Germany), AWS eu-west-1 (Ireland), Stripe (Ireland), Sentry (Germany), and Cloudflare's EU origin are inside the EU/EEA. Anthropic and OpenAI route to EU regions with zero retention. Postmark is the one US-located vendor; transfers are governed by EU Standard Contractual Clauses.

Question 3

Do US-located sub-processors see my customers' raw personal data?

Accepted Answer

No. Before any data leaves the platform, including for LLM inference and error monitoring, `App\Services\Ai\PiiRedactor` strips email addresses, phone numbers, IBANs, and credit card numbers. Stripe sees only billing data (your billing address and card details, not customer conversations). Postmark sees only the email it delivers (which by design is for your own administrative workflows).

Question 4

Are conversations used to train AI models?

Accepted Answer

No. Both Anthropic and OpenAI are configured with **zero data retention** at the account level. Prompts and completions are not retained beyond the request, and contractually cannot be used to train shared models.

Question 5

How much advance notice do I get when a sub-processor changes?

Accepted Answer

At least 30 calendar days, by email and by an update to this page. Subscribe to notifications by emailing **legal@keloa.ai**.

Question 6

What if I don't agree with a new sub-processor?

Accepted Answer

You have the right to object in writing within 30 days. Email **privacy@keloa.ai** with the specific concern. We will work to find a workaround; if none is feasible, you can terminate the affected portion of your subscription with a pro-rata refund.

Question 7

Are there Standard Contractual Clauses (SCCs) for transfers outside the EEA?

Accepted Answer

Yes, wherever a sub-processor sits outside the EEA, EU SCCs (Module 3, processor-to-processor) are in place, with any supplementary measures the transfer requires. This is documented in the DPA at [/legal/dpa](https://keloa.ai/legal/dpa).

Question 8

Why is Postmark in the US instead of a European email provider?

Accepted Answer

Postmark has the deliverability profile and EU SCC support we need for transactional email. We continue to evaluate EU-based alternatives and will switch if and when we find one that matches it on reliability, with the standard 30-day notice.

Question 9

Does Keloa maintain its own infrastructure on top of these sub-processors?

Accepted Answer

Yes. The Keloa application stack, code, queues, database schema, vector indexes, encryption keys, is operated by Keloa B.V. directly. Sub-processors provide compute, storage, and specialized services; the application logic and tenant isolation are ours.

Question 10

Can I get a list of which sub-processors apply to my specific plan?

Accepted Answer

Every customer on every plan uses Hetzner, AWS, Anthropic, OpenAI, Cloudflare, Postmark, and Sentry. Stripe applies only to paid plans. There is no per-plan variation in the rest of the list.

Question 11

Where do I report a privacy concern about how a sub-processor handles my data?

Accepted Answer

Email **privacy@keloa.ai**. We are the single point of contact under the DPA and will coordinate with the sub-processor on your behalf. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Question 12

Will this list grow as Keloa adds features?

Accepted Answer

Probably yes, for example, a future analytics or reranking feature could add a vendor. Every addition follows the same evaluation process and the same 30-day notice rule. The table on this page always reflects the current state.

Sub-processor	Purpose	Location	Scope
Hetzner Cloud	Primary application hosting	Falkenstein, Germany	All Customer Data
AWS (eu-west-1)	Object storage, backups	Dublin, Ireland	Backups, file uploads
Anthropic	AI model inference	EU region (Zero retention)	Conversation content, redacted
OpenAI	AI model inference	EU region (Zero retention)	Conversation content, redacted
Cloudflare	CDN, WAF, DDoS protection	Global edge, EU origin	Request metadata only
Postmark	Transactional email delivery	Boston, USA (SCCs)	Email recipient + content
Stripe	Subscription billing	Dublin, Ireland	Billing data only, no Customer Data
Sentry	Error monitoring	Frankfurt, Germany (EU SaaS)	Stack traces, redacted

Sub-processors

Notifications