Authorized Sub-processors
Last Updated: July 6, 2026
Effective Date: January 20, 2026
To deliver our Services, Krops GmbH ("Company", "We", "Us") engages third-party entities to assist with our data processing activities. These entities are known as "Sub-processors" under the General Data Protection Regulation (GDPR).
In accordance with Section 4 of our Data Processing Agreement (DPA), we maintain strict oversight over these entities. Each authorized sub-processor is bound by contractual data protection terms that are substantially equivalent to those set forth in our DPA, ensuring the continued security, confidentiality, and integrity of Customer Personal Data.
Current Sub-processor List
| Sub-processor | Purpose of Processing | Corporate Location | Data Processing Region | Transfer Safeguards |
|---|---|---|---|---|
| Hetzner Online GmbH | Cloud Infrastructure & Application Hosting | Germany | Germany (EU) | N/A (Processed entirely within the EU) |
| Google Cloud EMEA Limited | Core Platform Infrastructure & Database Management | Ireland | Frankfurt, Germany (EU) | N/A (Processed entirely within the EU) |
| Amazon Web Services EMEA SARL | Cloud Infrastructure, Object Storage & Backup Services | Luxembourg | Frankfurt, Germany (EU) | N/A (Processed within the selected EU region) |
| Anthropic, Inc. (Served via Google Cloud) | AI Model Inference & Content Processing | United States | Frankfurt, Germany (EU) | N/A (Data processing is strictly bound to Google Cloud's EU Data Boundary) |
| Melious AI GmbH | AI Model Inference & Model Routing | Germany | European Union / EEA | N/A (Processed within the EU/EEA) |
| Nebius B.V. | AI Model Inference & GPU Cloud Infrastructure | Netherlands | Finland (EU) | N/A (Processed entirely within the EU) |
💡 Enterprise Trust & AI Data Privacy Note
We understand the sensitive nature of operational enterprise data. When utilizing advanced language models via our platform, your data is isolated and secured under enterprise-grade protocols:
- Zero Model Training: Neither Krops GmbH nor the listed AI model providers will use your inputs, prompts, document context, or generated outputs to train public or foundational artificial intelligence models.
- Strict EU Data Residency: Our infrastructure and model inference integrations are configured to use the EU/EEA processing regions shown above, including AWS in Frankfurt, Germany.
- Incident Isolation: No communication or workspace data processed by our AI algorithms is accessible by other platform tenants.
Subscribe to Infrastructure Updates
Per Section 4.1.1 of the Krops GmbH Data Processing Agreement, customers have the right to receive notice of, and object to, any intended addition or replacement of an authorized sub-processor.
If you wish to receive automated email notifications at least two (2) weeks before we introduce a new sub-processor to this list, please opt-in by submitting your details below:
For any specific questions, legal objections, or technical inquiries regarding our sub-processors, please contact our data privacy desk directly at hello@gosophia.ai.