Sub-processors
The providers that process data on behalf of AIGiner, S.L.: what we use them for, where they operate and under which safeguard. This is the list the terms of each service and the data processing agreement refer to.
01. What this list is
A sub-processor is a provider that processes personal data on AIGiner's behalf in order to deliver a service: hosting the server, sending an email, charging an order. This page lists all of them, with the actual location of the processing and the safeguard that covers it.
When the list changes, it is updated here with the date. Anyone with a signed data processing agreement with us also receives the prior notice that agreement sets out, with the right to object within the period it fixes.
02. The sub-processors
| Provider | What it does | Where it processes the data | Safeguard |
|---|---|---|---|
| Contabo GmbH | Production server: the API, the database and the backups of Shara and of AIGiner's services. | Lauterbourg (France), European Union | Processor within the European Union. |
| Supabase | User authentication and customer database. | Ireland (eu-west-1), European Union | Data processing agreement; data hosted in the European Union. |
| Cloudflare | DNS, website publishing, protection against attacks, inbound email, the academy and message-inbox databases, and backups in storage under European Union jurisdiction. | European Union; network metadata also in the United States | Data processing agreement and Standard Contractual Clauses. |
| Language-model inference provider | The models used by Shara, the website assistant and the automated reviews of Web Check and Monitoring. | Dublin and Helsinki, European Union | Processor in the European Union with zero retention: it neither keeps the requests nor trains on them. Its trade name is added to this table upon signature of the data processing agreement. |
| Resend | Outbound email: confirmations, reports and notices. | United States | Data processing agreement and Standard Contractual Clauses. |
| Stripe | Card payments, invoices and subscription portal. | Ireland and United States | Data processing agreement and Standard Contractual Clauses. AIGiner neither sees nor stores the card number. |
| Telegram | Shara's ticket-based support channel and internal operational notices. | Outside the European Economic Area | Standard Contractual Clauses. It only processes what the user writes in a ticket. |
| Holded | Invoicing and accounting. | Spain, European Union | Processor within the European Union. |
03. What does not leave the European Union
The content the agents and reviews process —what you write, the documents you upload, what is on your website— is processed on servers and inference located in the European Union. What does leave, and we declare it, are four ancillary activities: outbound email, network metadata, payments and the support channel.
No sub-processor uses your data to train models, and neither do we. The inference provider does not keep the requests.
04. Change log
- 22 September 2026 · first publication of the list.
- 3 September 2026 · n8n is no longer a sub-processor: the tool was switched off and will not be reintroduced.