Sub-processors List
demi Technologies GmbH | Annex to Co-Development Agreement | As of: 3 May 2026
| Sub-processor | Purpose / Processing Activity | Location / Region | Transfer Basis | Status |
|---|---|---|---|---|
| Apollo.io, Inc. | API services, data provisioning and validation | USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Hunter.io (Leadspicker SAS) | API services, data validation | France (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Bouncer (Bouncer Sp. z o.o.) | API services, data validation | Poland (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Dropcontact SAS | API services, GDPR-compliant data processing | France (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Exa.ai, Inc. | API services, AI-powered data processing | USA | SCC (EU 2021/914) | Active |
| Serper.dev (Serper, Inc.) | API services, search services | USA | SCC (EU 2021/914) | Active |
| Tavily, Inc. | API services, AI-powered data processing | USA | SCC (EU 2021/914) | Active |
| Firecrawl (Mendable, Inc.) | API services, data extraction | USA | SCC (EU 2021/914) | Active |
| Google LLC (Cloud APIs) | API services, cloud APIs | USA / EU | EU-US DPF; SCC (EU 2021/914) | Active |
| Handelsregister.ai | API services, public registry data | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Datagma SAS | API services, data provisioning and validation | France (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| EnrichLayer / Proxycurl | API services, data provisioning | Singapore / USA | SCC (EU 2021/914) | Active |
| OVHcloud GmbH | Cloud infrastructure, hosting, managed services | Germany / France (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Amazon Web Services EMEA SARL (AWS) | Cloud infrastructure, managed services | Luxembourg (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Under review |
| Microsoft Azure (Microsoft Ireland Operations Ltd.) | Cloud infrastructure, AI services | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Under review |
| Google Cloud Platform (Google Ireland Ltd.) | Cloud infrastructure, API services | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Under review |
| IONOS SE | DNS management, domain services | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Hetzner Online GmbH | Cloud infrastructure, hosting | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Cloudflare, Inc. | CDN, network services, security | USA / EU | EU-US DPF; SCC (EU 2021/914) | Active |
| Vercel, Inc. | Frontend hosting, deployment services | USA | SCC (EU 2021/914); DPA | Under review |
| Netlify, Inc. | Frontend hosting, deployment services | USA | SCC (EU 2021/914); DPA | Under review |
| OpenAI, LLC | AI services, language processing | USA | SCC (EU 2021/914); DPA | Active |
| Anthropic, PBC | AI services, language processing | USA | SCC (EU 2021/914); DPA | Active |
| Google (Gemini / Vertex AI) | AI services, language processing | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Under review |
| Microsoft (Azure OpenAI / Copilot) | AI services, language processing | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Under review |
| Microsoft 365 (Microsoft Ireland Operations Ltd.) | Email, document processing, cloud storage | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Microsoft Teams (Microsoft Ireland Operations Ltd.) | Internal communication, video conferencing | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Meta Platforms Ireland Ltd. (WhatsApp Business) | Messaging services | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Slack Technologies, LLC (Salesforce) | Internal communication, messaging | USA | SCC (EU 2021/914) | Active |
| Notion Labs, Inc. | Internal documentation, project management | USA | SCC (EU 2021/914); DPA | Active |
| Linear Orbit, Inc. | Project management, task tracking | USA | SCC (EU 2021/914); DPA | Active |
| Flowmailer B.V. | Transactional email services | Netherlands (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Brevo SAS (ehem. Sendinblue) | Email services | France (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Inxmail GmbH | Email services | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Lettermint B.V. | Email infrastructure | Netherlands (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Sinch AB | Communication services (SMS, voice) | Sweden (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| CM.com N.V. | Communication services (SMS, messaging) | Netherlands (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Infobip d.o.o. | Communication services (SMS, messaging) | Croatia (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Userlike UG | Customer communication, messaging | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Unipile SAS | API integration, calendar services | France (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Cronofy Ltd. | Calendar synchronisation, scheduling | UK | AV-Vertrag; UK Adequacy Decision | Under review |
| rapidmail GmbH | Email services, newsletters | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| CleverReach GmbH & Co. KG | Email services, newsletters | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| Stripe Payments Europe, Ltd. | Payment processing | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Mollie B.V. | Payment processing | Netherlands (EU) | AV-Vertrag (Art. 28 DSGVO) | Under review |
| GitHub, Inc. (Microsoft) | Source code management, CI/CD | USA | EU-US DPF; SCC (EU 2021/914) | Active |
| GitLab B.V. | Source code management, CI/CD | Netherlands (EU) / USA | AV-Vertrag (Art. 28 DSGVO); SCC | Under review |
| Sentry (Functional Software, Inc.) | Error monitoring, performance monitoring | USA | SCC (EU 2021/914); DPA | Active |
| Vercel, Inc. (Web Analytics) | Web analytics, audience measurement (cookieless) | USA | EU-US DPF; SCC (EU 2021/914); DPA | Active |
| Google Ireland Ltd. (Google Analytics 4) | Web analytics, audience measurement, funnel tracking (consent-based) | Ireland (EU) / USA | Consent (Art. 6(1)(a) GDPR); EU-US DPF; SCC (EU 2021/914) | Active |
| Usercentrics GmbH | Consent management platform (cookie banner, consent recordkeeping) | Germany (EU) | Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR; DPA (Art. 28 GDPR) | Active |
| PostHog, Inc. | Product analytics, usage statistics | USA | SCC (EU 2021/914); DPA | Active |
| Mixpanel, Inc. | Product analytics, usage statistics | USA | SCC (EU 2021/914); DPA | Under review |
| Intercom R&D Unlimited Company | Customer communication, support services | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Under review |
| Zendesk, Inc. | Customer communication, support services | USA | EU-US DPF; SCC (EU 2021/914) | Under review |
| 1Password (AgileBits, Inc.) | Secret management, credential management | Canada / EU | SCC (EU 2021/914); DPA | Active |
| Pulumi Corporation | Infrastructure management | USA | SCC (EU 2021/914); DPA | Active |
| Let's Encrypt (ISRG) | TLS certificate services | USA | No personal data; public service | Active |
| SuperTokens, Inc. | Authentication, session management | USA (EU hosting) | SCC (EU 2021/914); DPA | Active |
| Microsoft Entra ID (Azure SSO) | Identity & access management, SSO | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Miro (RealtimeBoard, Inc.) | Collaboration services, visualisation | USA (EU hosting) | SCC (EU 2021/914); DPA | Active |
| Haufe-Lexware GmbH & Co. KG | Accounting, invoicing | Germany (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Pipedrive OÜ | CRM, contact management | Estonia (EU) | AV-Vertrag (Art. 28 DSGVO) | Active |
| Expo Application Services (650 Industries, Inc.) | Build services, push notifications | USA | SCC (EU 2021/914); DPA | Active |
| Apple Inc. (APNs) | Push notification services | USA | SCC (EU 2021/914) | Active |
| Microsoft Corporation (WNS) | Push notification services | USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Google Ireland Ltd. (Firebase Cloud Messaging) | Push notification services | Ireland (EU) / USA | EU-US DPF; SCC (EU 2021/914) | Active |
| Wix.com Ltd. | Website hosting, form services | Israel / EU / USA | SCC (EU 2021/914); DPA | Active |