Book a demoTry a free review
Free review
Legal

Sub-processors

The providers that process customer data on our behalf, and how we notify you before engaging a new one.

Last updated

Active sub-processors

The following partners process customer data on our behalf. Where a partner processes data outside the EU, our contract with them includes the EU's standard contractual clauses (and the EU–US Data Privacy Framework where the partner is certified).

  • Google Cloud (Google Cloud EMEA Ltd, Ireland) — stores your files and our records; runs document processing, AI proofreading, and translation of your questions and documents. Where: the EU. Safeguard: Google's EU data-processing terms, with standard contractual clauses for any access from outside the EU.
  • Eden AI (France) — passes your manual, supporting documents, answers and photos to the AI that analyses them and plans the corrections; does not store the content. Where: the EU. Safeguard: EU company; data processing agreement.
  • Microsoft Azure (Microsoft Ireland Operations Ltd, used by Eden AI) — runs the AI that analyses your manual, supporting documents, answers and photos and plans the corrections; may keep content for up to 30 days to check for misuse, reviewed only by staff in the European Economic Area. Where: the EU. Safeguard: Microsoft's EU data-processing terms.
  • OpenAI (OpenAI Ireland Ltd) — backup only, used for AI analysis if our main AI provider is unavailable; may keep content for up to 30 days, not for training. Where: the United States. Safeguard: standard contractual clauses.
  • Stripe (Stripe Payments Europe Ltd, Ireland) — payments, invoices, billing details. Where: Ireland, with some processing in the United States. Safeguard: the EU–US Data Privacy Framework and standard contractual clauses.
  • Scaleway (Scaleway SAS, France) — sends our emails, such as your results notices, receipts and invoices. Where: France. Safeguard: EU company; data processing agreement.
  • Resend (Plus Five Five, Inc., USA) — backup only: sends our emails if our main email provider is unavailable; also holds the records of emails sent before 24 September 2026. Where: the United States. Safeguard: the EU–US Data Privacy Framework and standard contractual clauses.
  • Railway (Railway Corp., USA) — runs our application. Where: runs in the Netherlands; requests can pass through its network entry points outside the EU. Safeguard: the EU–US Data Privacy Framework and standard contractual clauses (US company).
  • Vercel (Vercel Inc., USA) — hosts the website and passes your requests to our application; visit statistics if you accept analytics. Where: server steps in Germany; pages are delivered from a worldwide network, so a request can pass through a server outside the EU. Safeguard: standard contractual clauses.

Notification

We keep the current list, with locations, on this page and update it here before a new provider starts processing your data. If you want an email at least 14 days before such a change, write to privacy@eu-manuals.eu and we will add you to the notice list. You may object on reasonable grounds.