Skip to content
CentralBrain
Create my central brainCreate my company's central brain

Your data

Subprocessors registry

Every provider that processes personal data on our behalf: what it does, which data, where, and whether it is already in service.

The providers

What is not established yet is marked "to be confirmed", never assumed.

  • Supabase

    In use

    Database: the diagnostic's answers, accounts and the data of the services we run.

    Data processed
    The diagnostic's answers and contact details; the accounts and the data of the services we run for our clients.
    Where
    Frankfurt, European Union. Contracting company: Supabase Pte. Ltd., established in Singapore.
    Safeguard for a transfer outside the European Union
    To be confirmed

  • Vercel

    In use

    Hosting of the site and of our services.

    Data processed
    What passes between your browser and our services, including the network address.
    Where
    Pages computed in Frankfurt (European Union); public files served by a global network. American company (Vercel Inc.).
    Safeguard for a transfer outside the European Union
    To be confirmed

  • Brevo

    In use

    Sending e-mails: the diagnostic's report, follow-up e-mails, service messages.

    Data processed
    Each recipient's address and the content of each e-mail: for the person, their report as a PDF, with nothing written in the form; for our team, the alert of each diagnostic, with the answers and contact details. Brevo keeps a history of what it sends for its own retention periods.
    Where
    European Union (French company, servers in Europe).
    Safeguard for a transfer outside the European Union
    To be confirmed

  • Google Workspace

    In use

    Our mailbox (Google Workspace): it receives the alert of each new diagnostic and your messages.

    Data processed
    The answers, first name, company and e-mail address of each diagnostic, kept in our mailbox until we delete them (on request, among others); the messages you write to us.
    Where
    To be confirmed
    Safeguard for a transfer outside the European Union
    To be confirmed

  • iClosed

    In use

    Booking calls: the calendar of the booking page and of the diagnostic's report, loaded only after a click.

    Data processed
    As soon as the calendar is shown: the anonymous reference of the diagnostic and the browser's technical data (network address, browser). If you book: what you enter (name, e-mail address, company) and the time slot chosen.
    Where
    To be confirmed
    Safeguard for a transfer outside the European Union
    To be confirmed

  • Anthropic

    In use

    Writing the scenarios of the diagnostic's report, through Anthropic's API.

    Data processed
    Only the answers to the diagnostic's form, without first name, company or e-mail address. Anthropic keeps them for up to 30 days, longer for content flagged under its usage policies.
    Where
    United States.
    Safeguard for a transfer outside the European Union
    To be confirmed

  • Nango

    In use

    Connection to tools: authorizations and access keys, kept encrypted. Today in preproduction, on the tools of our own companies.

    Data processed
    The access keys to the tools we are allowed to read (today, those of our own companies).
    Where
    United States (Nango's hosted service).
    Safeguard for a transfer outside the European Union
    To be confirmed

  • Amazon Web Services (AWS Bedrock)

    Planned, not in service yet

    AI models of our clients' central brain (AWS Bedrock), as soon as our access opens.

    Data processed
    Each question asked to the brain, with only the passages the person asking is allowed to see.
    Where
    European Union: calls in Frankfurt; depending on the model, other AWS regions of the European Union.
    Safeguard for a transfer outside the European Union
    To be confirmed

  • Langfuse

    Planned, not in service yet

    Tracking the quality of the AI's answers: durations, costs and "helpful" or "not helpful" feedback.

    Data processed
    Measurements (model, durations, words used, number of sources) and pseudonyms. No text: no question, no answer, no name.
    Where
    European Union (Langfuse's European region).
    Safeguard for a transfer outside the European Union
    To be confirmed

When the registry changes

Every provider is added to this registry before it is put into service, with its role, the data it processes and where. Every change is dated at the top of this page.

Privacy policy

What we process, why, for how long, and your rights. Read the privacy policy