Question 1

Where can I see the full list of sub-processors?

Accepted Answer

Right here on this page, and at [/legal/sub-processors](https://keloa.ai/legal/sub-processors). The table above is the source of truth and is updated whenever a sub-processor is added or changed.

Question 2

Are all sub-processors inside the EU?

Accepted Answer

Most are. Hetzner Cloud (Germany), AWS eu-west-1 (Ireland), Stripe (Ireland), Sentry (Germany), and Cloudflare's EU origin are inside the EU/EEA. Anthropic and OpenAI route to EU regions with zero retention. Postmark is the one US-located vendor; transfers are governed by EU Standard Contractual Clauses.

Question 3

Do US-located sub-processors see my customers' raw personal data?

Accepted Answer

No. Before any data leaves the platform, including for LLM inference and error monitoring, `App\Services\Ai\PiiRedactor` strips email addresses, phone numbers, IBANs, and credit card numbers. Stripe sees only billing data (your billing address and card details, not customer conversations). Postmark sees only the email it delivers (which by design is for your own administrative workflows).

Question 4

Are conversations used to train AI models?

Accepted Answer

No. Both Anthropic and OpenAI are configured with **zero data retention** at the account level. Prompts and completions are not retained beyond the request, and contractually cannot be used to train shared models.

Question 5

How much advance notice do I get when a sub-processor changes?

Accepted Answer

At least 30 calendar days, by email and by an update to this page. Subscribe to notifications by emailing **legal@keloa.ai**.

Question 6

What if I don't agree with a new sub-processor?

Accepted Answer

You have the right to object in writing within 30 days. Email **privacy@keloa.ai** with the specific concern. We will work to find a workaround; if none is feasible, you can terminate the affected portion of your subscription with a pro-rata refund.

Question 7

Are there Standard Contractual Clauses (SCCs) for transfers outside the EEA?

Accepted Answer

Yes, wherever a sub-processor sits outside the EEA, EU SCCs (Module 3, processor-to-processor) are in place, with any supplementary measures the transfer requires. This is documented in the DPA at [/legal/dpa](https://keloa.ai/legal/dpa).

Question 8

Why is Postmark in the US instead of a European email provider?

Accepted Answer

Postmark has the deliverability profile and EU SCC support we need for transactional email. We continue to evaluate EU-based alternatives and will switch if and when we find one that matches it on reliability, with the standard 30-day notice.

Question 9

Does Keloa maintain its own infrastructure on top of these sub-processors?

Accepted Answer

Yes. The Keloa application stack, code, queues, database schema, vector indexes, encryption keys, is operated by Keloa B.V. directly. Sub-processors provide compute, storage, and specialized services; the application logic and tenant isolation are ours.

Question 10

Can I get a list of which sub-processors apply to my specific plan?

Accepted Answer

Every customer on every plan uses Hetzner, AWS, Anthropic, OpenAI, Cloudflare, Postmark, and Sentry. Stripe applies only to paid plans. There is no per-plan variation in the rest of the list.

Question 11

Where do I report a privacy concern about how a sub-processor handles my data?

Accepted Answer

Email **privacy@keloa.ai**. We are the single point of contact under the DPA and will coordinate with the sub-processor on your behalf. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Question 12

Will this list grow as Keloa adds features?

Accepted Answer

Probably yes, for example, a future analytics or reranking feature could add a vendor. Every addition follows the same evaluation process and the same 30-day notice rule. The table on this page always reflects the current state.

Sub-verwerker	Doel	Locatie	Omvang
Hetzner Cloud	Primaire applicatiehosting	Falkenstein, Germany	Alle Klantgegevens
AWS (eu-west-1)	Objectopslag, back-ups	Dublin, Ireland	Back-ups, bestandsuploads
Anthropic	AI-modelinferentie	EU-regio (geen retentie)	Gespreksinhoud, geredigeerd
OpenAI	AI-modelinferentie	EU-regio (geen retentie)	Gespreksinhoud, geredigeerd
Cloudflare	CDN, WAF, DDoS-bescherming	Wereldwijde edge, EU-origin	Alleen request-metadata
Postmark	Bezorging van transactionele e-mail	Boston, VS (SCC's)	Ontvanger en inhoud van e-mail
Stripe	Abonnementsfacturatie	Dublin, Ireland	Alleen factureringsgegevens, geen Klantgegevens
Sentry	Foutmonitoring	Frankfurt, Duitsland (EU SaaS)	Stack traces, geredigeerd

Sub-verwerkers

Meldingen