Sub-processors

A formal DPA is not published during the beta. Privacy questions: privacy@avokata.com.

In effect from 2026-09-26

The list

These providers process personal data on our behalf when you use avokata. The Lithuanian law corpus is public and is not personal data.

Sub-processorRoleLocation
Hetzner Online GmbHApplication servers, databases, nightly backupsGermany (EU)
Cloudflare, Inc.DNS, the TLS edge, DDoS protection, email routing, cookieless Web Analytics on the websiteGlobal edge; primary processing in the EU where offered

We do not sell personal data and do not use customer content to train third-party models.

Changes and objections

We update this list when a sub-processor changes materially; during the beta the change shows on this page with its date. Business customers with a signed agreement will get notice as that agreement requires, once enterprise terms exist. You may object on reasonable data-protection grounds by writing to privacy@avokata.com.

Transfers outside the EEA

Primary hosting and backups stay in Germany with Hetzner (EU). Cloudflare runs a global network; where personal data is processed outside the EEA we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the supplementary measures in Cloudflare’s data processing terms.