Legal
Sub-processors
A formal DPA is not published during the beta. Privacy questions: privacy@avokata.com.
In short
- We do not sell personal data and do not use customer content to train third-party models.
- We update this list when a sub-processor changes materially; during the beta the change shows on this page with its date.
These are sentences from the text below; they do not replace it, and the full text governs.
The list
These providers process personal data on our behalf when you use Avokata.
| Sub-processor | Role | Location and transfer safeguard |
|---|---|---|
| Hetzner Online GmbH | Application servers, databases, nightly backups; the server for website visit statistics (Umami, only with consent) | Germany (EU): no transfer. The statistics server is in Ashburn, United States; safeguard: Hetzner Online GmbH’s data processing agreement |
| Cloudflare, Inc. | DNS, the TLS edge, DDoS protection, email routing | Global edge; primary processing in the EU where offered. Safeguard: EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses (Cloudflare’s data processing addendum) |
| Resend (Plus Five Five, Inc.) | Sends our emails: sign-in links and codes, confirmations and notices | Sent from its EU region (Ireland); a US company. Safeguard: EU-U.S. Data Privacy Framework |
| Functional Software, Inc. (Sentry) | Server error reports | EU data region (Germany); a US company. Safeguard: EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses (Sentry’s data processing addendum) |
| Google (Google Workspace) | The mailbox where messages to our contact addresses arrive | Data may be processed in the United States and other countries. Safeguard: EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses (Google’s data processing terms) |
We do not sell personal data and do not use customer content to train third-party models.
Providers that help prepare public legal texts
These providers receive only public legal texts or our own test questions, never data about you, your account or your questions. Officially published texts can still name people, for example judges or companies; see the privacy policy.
| Provider | Role | Location and transfer safeguard |
|---|---|---|
| TypeSafe AI, Inc. (typesafe.ai) | Checks the structure of published court rulings (the role of each paragraph); receives depersonalised ruling paragraphs only | United States. Safeguard: none in place yet; we are arranging the EU Standard Contractual Clauses with the provider |
| OpenRouter, Inc. | Reads scanned public documents (OCR) | United States. Safeguard: EU Standard Contractual Clauses, module 2 (OpenRouter’s data processing agreement) |
| Anthropic, PBC | Checks the quality of answers on our own test questions | United States. Safeguard: EU Standard Contractual Clauses (Anthropic’s data processing addendum) |
You can get a copy of the safeguards named in these tables by writing to privacy@avokata.com.
Changes and objections
We update this list when a sub-processor changes materially; during the beta the change shows on this page with its date. Business customers with a signed agreement will get notice as that agreement requires, once enterprise terms exist. You may object on reasonable data-protection grounds by writing to privacy@avokata.com.
Transfers outside the EEA
Primary hosting and backups stay in Germany with Hetzner (EU). Cloudflare runs a global network; where personal data is processed outside the EEA the tables above name the safeguard for each provider.