Sub-processors
Last updated: 2026-05-19
Draft notice. This document is a v1.0 draft pending Swiss data protection counsel review. It is published here for transparency during the review process and may change before becoming final. Material changes will be dated in the change log at the bottom of the page.
Agenticsis engages the sub-processors listed below to deliver the services described in our Privacy Policy, Terms of Service, and Data Processing Agreement.
We give at least 30 days’ written notice before adding or replacing a sub-processor for client engagements where we act as data processor. Active clients can subscribe to change notifications at the bottom of this page.
How to read this list
- Sub-processor: the legal entity providing the service.
- Purpose: what the sub-processor does for us.
- Hosting location: the primary region where Personal Data is stored or processed.
- Transfer safeguard: the legal mechanism we rely on for international transfers from Switzerland and the EEA, where applicable. “DPF” means the EU-US and/or Swiss-US Data Privacy Framework. “SCCs” means the European Commission Standard Contractual Clauses (Decision (EU) 2021/914), supplemented for Switzerland by the FDPIC where applicable.
- Last updated: the date of the most recent review.
Infrastructure
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Vercel, Inc. | Website hosting, edge functions, build infrastructure | United States (with EU edge) | DPF (Vercel is DPF-certified) + SCCs as fallback | 2026-05-18 |
| Supabase, Inc. | Database, authentication, object storage | European Union (Supabase EU region) | EU processing; SCCs for support access from outside the EU | 2026-05-18 |
| Hostinger International, Ltd. | Self-hosted n8n VPS (compute) | Frankfurt, Germany | EU processing; SCCs for support access from outside the EU | 2026-05-18 |
AI providers
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Anthropic, PBC | Large language model API (Claude) for AI services. Configured to opt out of model training. | United States | DPF + SCCs as fallback. Zero data retention configured where supported. | 2026-05-18 |
| OpenAI, LLC | Large language model and image generation API. Configured to opt out of model training. | United States | DPF + SCCs as fallback. Zero data retention configured where supported. | 2026-05-18 |
| Perplexity AI, Inc. | Research and answer-engine API used for content and AEO services | United States | SCCs; DPF where applicable | 2026-05-18 |
| HTML/CSS to Image, Inc. | Server-side image rendering | United States | SCCs | 2026-05-18 |
Payments and billing
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. (IE) and Stripe, Inc. (US) | Payment processing, subscription billing, payment links | Ireland (EU) and United States | Intra-EU processing for Stripe Payments Europe; DPF + SCCs for Stripe, Inc. | 2026-05-18 |
Sales and prospecting
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Apollo.io, Inc. | B2B prospecting database (free tier with obfuscated outputs) | United States | DPF + SCCs as fallback | 2026-05-18 |
| Hunter (Email Hunter SAS) | B2B email finder | France (EU) | EU processing; SCCs for any non-EU tooling access | 2026-05-18 |
Transactional email
| Sub-processor | Purpose | Hosting location | Transfer safeguard | Last updated |
|---|---|---|---|---|
| Google LLC (Gmail via OAuth2) | Outbound transactional email (booking confirmations to admin and guests) sent via nodemailer using Gmail OAuth2 | United States | DPF + SCCs as fallback | 2026-05-19 |
Change history
We retain a public log of additions and removals for at least 24 months.
| Date | Change |
|---|---|
| 2026-05-19 | Removed Calendly and Google Workspace (not in use). Added Google LLC (Gmail OAuth2) for transactional email sent from the booking API. |
| 2026-05-18 | Initial publication of the consolidated Sub-processor List. |
Notifications
Active clients receive sub-processor change notifications by email under our Data Processing Agreement. Other interested parties can subscribe by emailing info@agenticsis.ch with the subject “Sub-processor notifications”.
For questions about a specific sub-processor, write to info@agenticsis.ch.