Subprocessors

• Hetzner Online GmbH, Germany: hosting of the application, relay and databases (Germany (European Union)).
• Stripe Payments Europe Ltd and Stripe Payments UK Ltd, Ireland and UK: subscription billing, invoices and card processing. Card data is held by Stripe, not by us.
• Microsoft Ireland Operations Ltd, EU: Microsoft Graph and Exchange Online, which the service calls on your behalf within your own tenant.
• OpenAI, L.L.C., United States: only when you use the AI template feature, for the text you type into it. Not used to train models. Transfers rely on the EU-US Data Privacy Framework and the UK Extension.

We give customers at least 30 days’ notice by email before adding or replacing a subprocessor, as set out in the Data Processing Addendum. Questions: privacy@gecosign.com.