Documents
Sub-processors
Last updated: 2 May 2026
Asvapp uses the following sub-processors to deliver the AILABIS service. All sub-processors are located within the European Union and process data exclusively within the EU/EEA.
This list reflects the current state and is part of the Data Processing Agreement (DPA). Asvapp will notify customers at least 30 days in advance of any addition, replacement or removal of a sub-processor. Customers may object to a change in writing within 14 days on reasoned data-protection grounds.
This page is provided in English only, as a standard reference for security and procurement reviews.
| Sub-processor | Location | Purpose | Compliance |
|---|---|---|---|
| UpCloud Ltd | Helsinki, Finland | Cloud server, database and object storage | |
| BunnyWay d.o.o. (bunny.net) | Ljubljana, Slovenia | CDN and frontend file delivery | |
| Hetzner Online GmbH | Falkenstein, Germany | Backup storage | |
| Sendinblue SAS (Brevo) | Paris, France | Transactional email delivery | |
| Mistral AI SAS | Paris, France | AI-based analysis (Files part only). No customer data is used for model training; processing is transient under Zero Data Retention. |
How sub-processor changes are handled
- Notification at least 30 days in advance of any addition, replacement or removal
- Customers may object in writing within 14 days on reasoned data-protection grounds
- If no agreement is reached, the customer may terminate the service agreement without notice
- Each sub-processor is bound by a written agreement imposing at minimum the data-protection obligations of our DPA
Hosting and data location
All customer data — including production databases, backups and AI processing — is processed and stored exclusively within the European Union / European Economic Area. No personal data is transferred outside the EU/EEA.
Compliance documentation
Sub-processor certificates (ISO 27001, SOC 2 reports, etc.) are available on request for procurement and audit reviews. Contact: info@ailabis.io