1. Current subprocessors
| Company | What it does | Where data is processed |
|---|---|---|
| Hetzner Online GmbH, Germany | Servers, storage and backups | Germany (Nuremberg) |
| Migadu-Mail GmbH, Switzerland | Sending transactional email (sign-in, invitations, receipts) | Switzerland (EU adequacy decision); Migadu does not publish the countries of its data centres, and processes under the GDPR and Swiss law |
2. Planned
| Company | What it will do | Where |
|---|---|---|
| Mollie B.V., Netherlands | Payments, once paid plans go live | EU |
We do not use Stripe, analytics vendors, advertising networks or US-owned cloud providers.
3. Your AI provider is not on this list
Answers are written by the AI model your organisation connects — for example OpenAI, Anthropic, Mistral, Azure OpenAI or a model you host yourself. You choose and contract with that provider directly; it processes data as your processor, under your agreement with it. The same is true of the assistant you use with our MCP connector.
4. Being told about changes
Organisation owners are told by email at least 30 days before a change, and the change is shown on this page for the same 30 days. There is no mailing list for others; anyone can read the dated changelog at the end of this page. Questions: privacy@gelex.eu.
Changelog
- , version 1: First version.