Sub-processors
Last updated: 2026-10-18
Draft notice. This document is a draft pending Swiss data protection counsel review; its version and change history are in the change log at the bottom of the page. It is published here for transparency during the review process and may change before becoming final. Material changes will be dated in the change log at the bottom of the page.
Agenticsis engages the sub-processors listed below to deliver the services described in our Privacy Policy, Terms of Service, and Data Processing Agreement.
We give at least 30 days’ written notice before adding or replacing a sub-processor for client engagements where we act as data processor. Active clients receive these notices by email (see Notifications below).
How to read this list
- Sub-processor: the legal entity providing the service.
- Purpose: what the sub-processor does for us.
- Hosting location: the primary region where Personal Data is stored or processed.
- Transfer safeguard: the legal mechanism we rely on for international transfers from Switzerland and the EEA, where applicable. “DPF” means the EU-US and/or Swiss-US Data Privacy Framework. “SCCs” means the European Commission Standard Contractual Clauses (Decision (EU) 2021/914), supplemented for Switzerland by the FDPIC where applicable.
- Last updated: the date of the most recent review.
Infrastructure
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Vercel, Inc. | Website and application hosting, server functions, build infrastructure. The server functions of the AI Visibility Program run in Frankfurt. | United States (with EU edge); Visibility Program functions in Frankfurt, Germany (EU) | DPF (Vercel is DPF-certified) + SCCs as fallback | 2026-10-18 |
| Supabase, Inc. | Database, authentication, object storage | Stockholm, Sweden (EU) | EU processing; SCCs for support access from outside the EU | 2026-10-18 |
| Hostinger International Ltd. (Lithuania, EU) | Virtual server that hosts our self-hosted n8n automation server (contact-form notifications and confirmations, billing workflows) and the background worker of the AI Visibility Program, which runs the reports and content our clients order | Frankfurt, Germany (EU) | EU processing; SCCs for support access from outside the EU | 2026-10-18 |
| Google LLC (Google Search Console and PageSpeed Insights APIs) | Indexing requests and page-speed measurements for client websites in the AI Visibility Program. Only public page addresses are sent. | United States | No personal data sent | 2026-10-18 |
AI providers
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Anthropic, PBC | Large language model API (Claude) for AI services. Configured to opt out of model training. | United States | DPF + SCCs as fallback | 2026-10-17 |
| OpenAI, LLC | Large language model and image generation API. Configured to opt out of model training. | United States | DPF + SCCs as fallback | 2026-10-17 |
| Perplexity AI, Inc. | Research and answer-engine API used for content and AEO services | United States | SCCs; DPF where applicable | 2026-05-18 |
| HTML/CSS to Image, Inc. | Server-side image rendering | United States | SCCs | 2026-05-18 |
| DataForSEO OÜ | Search and AI-answer data for the AI Visibility Program: search rankings and keyword data, and the answers that ChatGPT, Gemini, Perplexity and Claude give to the buyer questions a client tracks. We send search terms, questions and website addresses. | Estonia (EU); infrastructure in Germany and the United States | EU company under the GDPR; SCCs for its US infrastructure | 2026-10-18 |
| SideGuide Technologies, Inc. (Firecrawl) | Reads public web pages (client websites and public sources) for the AI Visibility Program. We send page addresses only. | United States | No personal data sent | 2026-10-18 |
| NEXUSAI Services LLC (kie.ai) | AI image generation for social-post visuals in the AI Visibility Program. We send an image description written from the post; no photos of people and no contact details. | United States | No personal data sent | 2026-10-18 |
Payments and billing
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. (IE) and Stripe, Inc. (US) | Payment processing, subscription billing, payment links | Ireland (EU) and United States | Intra-EU processing for Stripe Payments Europe; DPF + SCCs for Stripe, Inc. | 2026-05-18 |
Sales and prospecting
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Apollo.io, Inc. | B2B contact database, used for our own prospecting and for the lead search clients run in the AI Visibility Program | United States | DPF + SCCs as fallback | 2026-10-18 |
| Hunter (Email Hunter SAS) | B2B email finder, used for our own prospecting and for the lead search clients run in the AI Visibility Program | France (EU) | EU processing; SCCs for any non-EU tooling access | 2026-10-18 |
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Google LLC (Google Workspace) | Email for info@agenticsis.ch (Gmail) and our business correspondence. Until October 2026 it also sent the confirmations of the website booking calendar. | United States | DPF + SCCs as fallback | 2026-10-17 |
| Twilio Inc. (SendGrid) | Transactional email: website contact-form notifications and confirmations, and emails sent by our applications | United States | SCCs; DPF where applicable | 2026-10-17 |
Change history
We retain a public log of additions and removals for at least 24 months.
| Date | Change |
|---|---|
| 2026-10-18 | Added DataForSEO, Firecrawl (SideGuide Technologies), kie.ai (NEXUSAI Services) and Google’s Search Console and PageSpeed APIs. The AI Visibility Program already used them and this list had missed them. Updated Vercel (the Visibility Program’s functions now run in Frankfurt), Supabase (Stockholm region), Hostinger (it also runs the Visibility Program’s background worker) and Apollo and Hunter (also used by the Visibility Program’s lead search). Aligned the notification wording with our Data Processing Agreement. |
| 2026-10-17 | Re-added Google LLC as Google Workspace (email for info@agenticsis.ch). Added Twilio Inc. (SendGrid) for transactional email, including website contact-form notifications and confirmations. Updated the Hostinger entry: it hosts our n8n automation server, which processes contact-form messages. Removed the zero data retention statements for Anthropic and OpenAI; the no-training settings remain. Change notifications are now requested by email. |
| 2026-05-19 | Removed Calendly and Google Workspace (not in use). Added Google LLC (Gmail OAuth2) for transactional email sent from the booking API. |
| 2026-05-18 | Initial publication of the consolidated Sub-processor List. |
Notifications
Active clients receive sub-processor change notifications by email under our Data Processing Agreement. Other interested parties can subscribe by emailing info@agenticsis.ch with the subject “Sub-processor notifications”.
For questions about a specific sub-processor, write to info@agenticsis.ch.