Opafex Ltd (company no. 17330428) engages the third parties below to process personal data on behalf of our customers, under our Data Processing Agreement. We give customers at least 30 days' notice of any addition or replacement, by email and by updating this page, and you may object on reasonable data-protection grounds.
Last updated: 17 August 2026
Core sub-processors (always engaged)
| Provider | Purpose | Data processed | Sees | Location | Transfer mechanism |
|---|---|---|---|---|---|
| Anthropic, Inc. | Primary AI language-model processing (chat, planning, formatting, task execution) | Prompts + agent responses; document/CV text | Content | US | EU SCCs + UK IDTA (Anthropic DPA); TRA on file |
| Amazon Web Services EMEA / Amazon.com, Inc. | File & document storage (Amazon S3); AI language-model processing in-region (Amazon Bedrock) for accounts pinned to a UK/EU model region | Uploaded documents, images, formatted CVs/PDFs; for in-region accounts, the prompts and model outputs of document processing | Content | UK (London, eu-west-2) | UK Extension to the EU-US DPF (adequacy) + EU/UK SCCs backstop; stored and processed in the UK |
| Railway Corp. | Application hosting, managed PostgreSQL database, and Redis cache/queue | All platform data at rest (conversations, knowledge, tasks, records) | Content | EU (Amsterdam, europe-west4) | EU/UK SCCs + executed Railway DPA (14 August 2026); runs on Google Cloud; primary data at rest stays in the EU |
| Stripe, Inc. | Subscription billing, checkout, tax | Billing name, email, billing address, Stripe IDs — no card data touches our servers | Metadata only | US | UK Extension to the EU-US DPF (adequacy) + SCCs |
Conditional sub-processors (engaged only if you use the relevant feature)
| Provider | Engaged when | Data processed | Sees | Location | Transfer mechanism |
|---|---|---|---|---|---|
| Google LLC | The secondary/analysis AI tier is used (paid, no-training) | Prompts + responses | Content | US (EU option via Vertex) | UK Extension to the EU-US DPF (adequacy) + SCCs; paid tier — no training on data |
| Resend (Plus Five Five, Inc.) | An agent sends product / transactional email | Recipient email address + message content | Content | US | UK Extension to the EU-US DPF (adequacy) + EU/UK SCCs |
| Functional Software, Inc. (Sentry) | Error & performance monitoring (platform-wide; PII redacted) | Error events, stack traces, request context (PII redacted where possible) | Incidental content | EU (Germany) | UK Extension to the EU-US DPF (adequacy) + SCCs; EU organisation region |
| OpenAI, L.L.C. | The AI fallback tier or text embeddings are used | Prompts / text sent for embedding | Content | US (EU region available) | EU SCCs + UK Addendum (not DPF-certified) |
| Mistral AI SAS | An EU-sovereign AI model (Mistral) is selected for chat, formatting, or task execution | Prompts + agent responses; document/CV text | Content | EU (France) | GDPR — EU-based, no restricted transfer; Mistral DPA; paid tier — no training on data |
| Twilio Inc. (incl. SendGrid) | An agent sends SMS / voice, or backup email is used | Phone numbers / recipient email + message content | Content | US | UK Extension to the EU-US DPF (adequacy) + SCCs |
| Steel | An agent browses the public web for you | Target URLs + fetched page content | Content | US (or self-hosted) | SCCs — verify current DPA |
| Hunter.io (Hunter SAS) | You use the email-enrichment capability | Email addresses, domains | Content | EU | GDPR — EU-based (no restricted transfer) |
Not sub-processors / excluded
- Bring-Your-Own-Key (BYOK) providers (e.g. Groq, or any provider you connect with your own API key): when you supply your own key, that provider becomes your processor, not ours.
- Datadog and Langfuse/ClickHouse (LLM tracing): not enabled in production — listed here for transparency only; if either is switched on, this list will be updated first and it will be configured EU-region/self-hosted.
- Integrations you connect (your Salesforce, Gmail, GitHub, Slack, etc.): those are your controllers/processors — we transmit to them on your instruction.
Notes
- Regions: our hosting (Railway) and our error monitoring (Sentry) both run in the EU — Amsterdam and Germany respectively. Those are the live configurations, not a stated intention. If either moves, we update this page.
- Data-residency controls you have: BYOK (your own AI provider key), Private Mode (your own database + local models — no platform LLM providers used), and paid no-training AI tiers.
- DPF verification: where a provider above relies on the "UK Extension to the EU-US DPF",
certifications renew annually and you can check the current status yourself on the official register
at
dataprivacyframework.gov.