Annexes
ANNEX 5 – Subprocessor List
Version v1.1Last updated April 20, 2026
| PROVIDER | PURPOSE | DATA LOCATION / TRANSFERS |
|---|---|---|
| Clerk | Authentication & Identity Management | Germany (EU/EEA) |
| Vercel | Publishing Platform / Edge | Sweden and France (EU/EEA) |
| AWS | Cloud Infrastructure | Sweden (EU/EEA) |
| MongoDB Atlas | Managed Database | Sweden (EU/EEA) |
| Microsoft Azure | Cloud Services | Sweden (EU/EEA) |
| Pipedrive | CRM & Sales Tools | Europe (AWS) (EU/EEA) |
| Anthropic PBC | Language model / AI inference (Claude), ZDR contractual terms | USA; transfers under GDPR Chapter V: SCCs and/or EU–US DPF as applicable |
| OpenAI | Language model / AI inference | USA; transfers under GDPR Chapter V: SCCs and/or EU–US DPF as applicable |
| Google LLC / Google Cloud | Language model / AI inference (Gemini) and other cloud services as applicable | EU or USA (service-dependent); transfers under GDPR Chapter V: SCCs and/or EU–US DPF as applicable |
Changes will be notified at least 30 days in advance. The data controller (i.e., the user) has the right to object to the notified change for a justified reason, such as insufficient data security with the new subprocessor.