Subprocessors
These providers process personal data on our behalf (Art. 28 GDPR). We update this list before a new subprocessor goes into production.
Last updated: 20 July 2026
| Provider | Purpose | Location / processing | Basis |
|---|---|---|---|
| Hetzner Online GmbH | Hosting and infrastructure (application, database, file storage) | Germany | DPA · processed exclusively in the EU |
| OpenRouter, Inc. | AI model routing. Onward: Anthropic (language models), OpenAI (embeddings). | USA | DPA · Standard Contractual Clauses · privacy mode: no training, no content retention |
| Mailjet (Sinch Email) | Sending inbrix system email (invitations, notifications, invoices). Not your customers' support email. | France | DPA · processed in the EU |
| Slack (Salesforce, Inc.) | Internal notification about new signups (name and business email address) | USA | DPA · Standard Contractual Clauses |
Planned
| Provider | Purpose | Location / processing | Basis |
|---|---|---|---|
| PostHog, Inc. | Product and website analytics | US company · processed in the EU cloud (Frankfurt) | DPA · EU cloud selected · not yet integrated |
| Omnifact GmbH | AI inference processed in Germany | Frankfurt, Germany | In preparation – not yet in use |
Not on this list
Our error monitoring is self-hosted – no telemetry goes to an external service. Every remaining component runs on our own infrastructure at Hetzner, with no further providers involved.
Changes
We notify customers at least 30 days before a new subprocessor is used, so objection stays possible. Write to datenschutz@golle-it.de if you want to be notified of changes.