Subprocessors
ITOPI AB uses the subprocessors below to provide Alltended under the Data Processing Agreement. We email organization administrators at least 30 days before adding or replacing a subprocessor, and update this page.
| Subprocessor | Purpose | Data | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH, Germany | Server hosting, storage and machine backups for the app, databases and attachments | All Customer Data | Finland (EU) | Not applicable (EU) |
| Amazon Web Services EMEA SARL, Luxembourg | Receiving and sending email (Amazon SES), temporary storage of incoming raw email (Amazon S3) and delivery queues (Amazon SQS and SNS) | Email content, headers, attachments and addresses in transit; delivery events | Stockholm, Sweden (AWS region eu-north-1) | Data stays in the EU region. Group access is covered by the EU–US Data Privacy Framework and standard contractual clauses |
| Google Cloud EMEA Ltd, Ireland (Google Workspace) | Our support mailbox, support@alltended.com | Only information you choose to send us in support correspondence | EU and other Google locations | EU–US Data Privacy Framework and standard contractual clauses |
Not subprocessors
Stripe processes subscription payments. It receives your organization’s billing details and payment information, not inbox content. Stripe acts as ITOPI AB’s processor for billing and as an independent controller for its own payment, fraud-prevention and legal obligations. See the Privacy Policy.
Integrations and AI assistants you connect, such as an MCP connection to your AI provider, receive the data you authorize. You choose and contract with that provider; it is not our subprocessor.
History
- 4 October 2026: first published list.