Sub-Processor Register
Last updated: April 2026
In accordance with GDPR Article 28, we maintain a transparent register of all third-party sub-processors that process personal data on behalf of Coniviso. We notify users of any changes to this list.
| Sub-Processor | Purpose | Data Processed | Location | DPA Status |
|---|---|---|---|---|
| Paddle | Payment processing & subscription management | Name, email, billing address, payment method | United Kingdom | In place |
| Google Cloud (Vertex AI / Gemini) | AI video analysis, transcription, embeddings | Video frames, audio, generated analysis metadata | EU (europe-west4) | In place |
| Hetzner Online | Infrastructure hosting (servers, storage) | All platform data (encrypted at rest) | Germany | In place |
| RunPod | GPU compute for video encoding & transcription | Video files (transient processing only) | EU | In place |
| PostHog | Product analytics (opt-in only) | Usage events, session recordings (if consented) | EU (Frankfurt) | In place |
| Keycloak (self-hosted) | Identity management & authentication | Email, username, credentials | Germany (co-located) | Self-hosted — no third-party DPA required |
| Sentry | Error monitoring & crash reporting | Error stack traces, request metadata (no PII) | EU | In place |
| Listmonk (self-hosted) | Transactional email delivery | Email addresses, email content | Germany (co-located) | Self-hosted — no third-party DPA required |
If you have questions about our sub-processors, please contact us at [email protected].