Sub-processors
Version 1.0 · effective from 10 October 2026 · belongs to the privacy statement and the data processing agreement.
| Service | Used for | Location | Role | Safeguard |
|---|---|---|---|---|
| Anthropic (Claude API) | Analysis of uploads, interview, draft | United States | Sub-processor | Standard contractual clauses and UK addendum in Anthropic's data processing agreement. Data not used for training, in principle deleted within 30 days |
| n8n Cloud | Workflows, forms, chat, storage of drafts | EU (Frankfurt, Microsoft Azure) | Sub-processor | Data processing agreement with standard contractual clauses for the US companies in the chain |
| Microsoft Azure Document Intelligence | Reading Word files | EU (North Europe, Ireland) | Sub-processor | Result deleted straight after the analysis, otherwise after 24 hours |
| Stripe | Payment and invoices | Ireland (Stripe group) | Processor for the payment, independent controller for purposes such as fraud prevention and legal obligations | Stripe's own privacy policy and data processing agreement |
| Cloudflare | Hosting and security of keepstoneai.eu, visitor statistics without cookies | Global network, Cloudflare Inc. (United States) | Processor (website visits only) | EU-US Data Privacy Framework, plus standard contractual clauses and UK addendum |
| Cloud86 | Domain and email: the mailbox [email protected] and sending confirmations, delivery emails and contact form messages | the Netherlands (own data centre) | Sub-processor | Within the EU |
| Microsoft 365 | Storage of Keepstone's records, such as the breach register | EU (Microsoft EU Data Boundary) | Sub-processor | Microsoft's data processing agreement |