Last updated: 14 May 2026
Subprocessor List
ELLYTIC Technologies UG (haftungsbeschränkt) uses carefully selected subprocessors to deliver its digital services. All subprocessors operate under GDPR-compliant Data Processing Agreements (DPAs).
Where subprocessors are located outside the EU/EEA, transfers occur only with appropriate safeguards, such as Standard Contractual Clauses (SCCs), EU-hosted environments, or equivalent protections.
01Infrastructure & Hosting
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Vercel | Primary hosting, deployment, CDN/edge distribution | Germany | DPA/SCCs |
| Neon | Managed PostgreSQL database for customer and operational data | Frankfurt | DPA |
| AWS S3 | Document storage (uploaded customer documents, invoices) with 10-year Object Lock for GoBD compliance | Frankfurt (eu-central-1) | DPAISO 27001SOC 2 |
02Email Delivery & Communication
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Resend | Transactional emails (account creation, notifications, service messages) | EU | DPA |
| Brevo | Marketing & Transactional Emails | France | DPA |
| Google Workspace | Email hosting, internal communication | EU | DPA/SCCs |
03Payments
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Revolut | Card and bank payments, merchant acquiring | Lithuania | PSD2DPA |
| Stripe | Payment processing, invoicing metadata | EU | PCI-DSSDPA |
| PayPal | Alternative payment processing | Luxembourg | DPA |
04Customer Support
ELLYTIC Technologies UG (haftungsbeschränkt) does not use external customer support platforms. All support is handled internally via:
- support@ellytic.com
- Internal case management tools
05AI-Assisted Processing & Document Workflows
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| OpenAI | AI-assisted summarization, classification, text generation; human-in-the-loop workflows | EU | DPA/SCCs |
| Anthropic | AI-assisted reasoning, verification, structured workflows | EU via SCCs | DPA/SCCs |
Notes:
Customer data is not used to train public models.
All AI outputs undergo professional human review ("human-in-the-loop").
06Electronic Signature Services
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Yousign | Qualified and advanced electronic signatures for documents | France | eIDASDPA |
07Analytics (Consent-Based)
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Google Analytics | Website analytics (activated only with explicit consent) | EU | IP anonymisedDPA |
08Monitoring & Observability
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Sentry | Error tracking, performance monitoring, and application telemetry | EU (DSN) | DPAEU DSNPII scrubbing |
09Booking & Scheduling
| Subprocessor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Cal.com | B2B demo and consultation scheduling (name, email, booking metadata) | EU (Germany) | DPA |
10Updates to This List
We will update this Subprocessor List before adding a new subprocessor or materially changing an existing one.
Users may request notifications of updates by contacting: privacy@ellytic.com