Sub-processors
The vendors below may process Customer Data on Rahoto's behalf to deliver the Service. AI model providers only ever receive redacted summaries and profiles of your data — never raw rows — and never train on it. Bring-your-own AI model endpoints are configured by you and are not Rahoto sub-processors. We give at least 30 days' notice before adding a sub-processor — subscribe at [email protected] to be notified.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Primary compute and database hosting | EU (Germany / Finland) |
| S3-compatible object storage | Report assets, exports, and snapshots | EU |
| Stripe | Subscription billing and payment processing | EU / US (SCCs) |
| Transactional email provider | Account, verification, and delivery notification emails | EU |
| Error & uptime monitoring | Operational diagnostics and incident response | EU |
| Google (Gemini API) | Active default AI model provider — receives redacted summaries and profiles only, never raw rows; never used for training | EU / US (SCCs) |
| Anthropic (Claude API) | Available AI model provider, routed only where a deployment or organisation configures it — same redacted envelope; never used for training | US (SCCs) |
| OpenAI (OpenAI API) | Available AI model provider, routed only where a deployment or organisation configures it — same redacted envelope; never used for training | US (SCCs) |
Notifications
To receive advance notice of changes to this list, email [email protected] with the subject "subprocessor notifications". Enterprise customers receive notices to their designated security contact.
Related
See the Data Processing Agreement, Privacy Policy, and Trust Center for how this data is protected.