Introduction
This page lists the third-party sub-processors that helpful bits GmbH uses to provide the CrispDemo service to users in the EU/UK.
We carefully select our sub-processors to ensure they meet our high standards for security, privacy, and data protection.
Current Sub-processors
Stripe
Purpose: Payment processing services
Data Processing Regions: United States, European Union
Legal Documents:
Transfer Safeguards: EU operations processed in-region; for transfers to the US, Data Privacy Framework participation and Standard Contractual Clauses with supplementary measures
OpenAI
Purpose: AI model processing and natural language understanding
Data Processing Regions: United States
Data Usage: Training disabled where available and contractually restricted to service provision
Legal Documents:
Transfer Safeguards: Standard Contractual Clauses with supplementary measures
Google AI/Gemini
Purpose: AI model processing and natural language understanding
Data Processing Regions: United States
Data Usage: Training disabled where available and contractually restricted to service provision
Legal Documents:
Transfer Safeguards: Standard Contractual Clauses with supplementary measures
Anthropic
Purpose: AI model processing and natural language understanding
Data Processing Regions: United States
Data Usage: Training disabled where available and contractually restricted to service provision
Legal Documents:
Transfer Safeguards: Standard Contractual Clauses with supplementary measures
Vercel
Purpose: Web hosting and edge infrastructure
Data Processing Regions: Global (with EU data residency options)
Legal Documents:
Transfer Safeguards: Standard Contractual Clauses, EU data residency available
Amazon Web Services (AWS)
Purpose: Application hosting and content delivery (CloudFront CDN and S3 storage)
Data Processing Regions: Global (with regional data residency options)
Legal Documents:
Transfer Safeguards: Standard Contractual Clauses, EU data residency available, enterprise security standards
Auth0
Purpose: Authentication and identity management services
Data Processing Regions: United States, European Union
Legal Documents:
Transfer Safeguards: Standard Contractual Clauses, EU data residency available
Mailgun
Purpose: Transactional email delivery services
Data Processing Regions: United States, European Union
Legal Documents:
Transfer Safeguards: Standard Contractual Clauses with supplementary measures
Changes to Sub-processors
We will notify customers of any changes to our sub-processors list at least 30 days in advance. Customers can object to the use of a new sub-processor within this notice period.
Contact
If you have questions about our sub-processors, please contact us at [email protected].