1. Subprocessors
Summa uses the following subprocessors and has accepted each provider’s data processing agreement. Leafcloud B.V. is the only infrastructure provider: the core application, databases, file storage, backups and AI inference all run in the Netherlands. This register forms part of the Privacy Notice.
| Provider | Function | Data processed | Location | Transfer position |
|---|---|---|---|---|
| Leafcloud B.V. (Netherlands) | Kubernetes compute, storage, networking, backups (object storage) and GPU inference for the self-hosted model | Application, account, conversation, file, audit and operational data | Netherlands | Processing within the Netherlands; no transfer mechanism required |
| Mailjet (Mailjet SAS, part of Sinch) | Transactional and operational email | Email address, name, email content, delivery metadata | European Union | Processing within the EU; no transfer mechanism required |
| Stripe (Stripe Payments Europe, Ltd., Ireland, and the Stripe group) | Checkout, subscriptions, invoices, fraud prevention and payment processing | Billing details, payment identifiers, transaction and fraud data | EEA, United States and other documented Stripe locations | Stripe transfer mechanisms: adequacy decisions and/or standard contractual clauses |
| Linkup (Linkup Technologies SAS, France) | Web search for the chat web-search feature | Search queries and URLs generated from a conversation when web search is used, and request metadata | European Union (France) | Processing within the EU; no transfer mechanism required |
Stripe may act as an independent controller for some payment, fraud-prevention and legal-compliance activities rather than solely as Summa’s processor.