Sub-processors
Last updated 17 July 2026
Shpat Radoniqi B.I. ("AIA", "we", "us") uses the third-party vendors listed below ("sub-processors") to help provide the AIA platform. Each processes personal data only on our documented instructions, under a data processing agreement. This page is our mechanism for the general written authorization of sub-processors under Article 28 GDPR.
| Vendor | Location | Service | Data processed | Safeguards |
|---|---|---|---|---|
| Anthropic PBC | United States | Claude API (AI processing) | Message content and context submitted for classification, response drafting, and agent features | Data processing agreement; EU Standard Contractual Clauses; API inputs and outputs not used to train models |
| Railway Corp. | United States | Cloud hosting (application, PostgreSQL, Redis) | All platform data stored or processed by the service (account data, messages, knowledge bases, logs) | Data processing agreement; EU Standard Contractual Clauses; encryption in transit and at rest |
| Cloudflare, Inc. | United States (global network) | CDN, security, and bot protection (including Turnstile on sign-in pages) | Site traffic metadata and security challenge data as traffic transits their network | Data processing addendum; EU Standard Contractual Clauses |
| Google LLC | United States | Gmail API (transactional email delivery) | Recipient email addresses and the content of transactional emails we send (invitations, digests, notifications) | Data processing terms; EU Standard Contractual Clauses |
Connected platforms (not sub-processors)
| Platform | What connecting it means |
|---|---|
| Google (Gmail) | Connected by you as a message source. Google processes your mailbox under your Google agreement; we access it only with the OAuth permissions you grant and you can disconnect at any time. |
| Microsoft (Outlook) | Connected by you as a message and calendar source, under your Microsoft agreement and the permissions you grant. |
| Meta (Facebook, Instagram, WhatsApp) | Connected by you as messaging channels, under Meta's terms and the permissions you grant. |
| Slack | Connected by you as a messaging channel, under Slack's terms and the permissions you grant. |
1. What is a sub-processor?
A sub-processor is a third-party vendor we engage to process personal data on behalf of our customers — for example, our hosting provider. Services you connect yourself (like your own Gmail or WhatsApp accounts) are not sub-processors: you authorize those directly, and they remain governed by their own terms. We list them above for transparency.
2. Changes to this list
We will update this page and notify account owners by email at least 30 days before a new or replaced sub-processor starts processing customer personal data. If you object on reasonable data-protection grounds, you may terminate the affected services before the change takes effect.
Emergency replacements (for security or continuity) may happen faster; we will notify you as soon as reasonably possible.
3. Embeddings and AI processing
Knowledge-base search vectors (embeddings) are generated on our own infrastructure by default; no additional vendor receives your documents for this purpose. AI classification and response generation use Anthropic, listed above.
4. Contact
Questions about our sub-processors or this authorization mechanism can be sent to info@aiaplatform.ai. See also our Privacy Policy.
See also: Privacy Policy · Terms & Conditions · Imprint · Cookie Policy