Subprocessors
Last updated: 16.07.2026
This page lists the third parties that process personal data on behalf of Zeptix in order to provide the service. The list is updated as needed.
Notification of changes: Core subprocessors (which process data automatically, e.g. hosting, moderation, default AI routing) are announced to chatbot operators by e-mail at least 14 days before productive use, with a right to object. Optional model providers only process data once an operator actively selects the model in the dashboard — they may therefore be added at any time; the active selection constitutes approval.
| Provider | Purpose | Data categories | Location | Safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting of platform infrastructure | Platform and account data | Germany | Processed under Art. 28 GDPR |
| Cloudflare, Inc. | Security, DDoS protection, delivery | IP addresses, technical metadata | USA | Processed under Art. 28 GDPR; third-country transfer under EU-US Data Privacy Framework (Art. 45) + SCCs |
| IONOS SE | Sending transactional e-mails | E-mail addresses, e-mail content | Germany | Processed under Art. 28 GDPR |
| Stripe Payments Europe, Ltd. | Payment processing | Name, e-mail, payment tokens, invoicing data | Ireland | Processed under Art. 28 GDPR |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payment processing (alternative payment method PayPal) | Name, e-mail, PayPal transaction/order ID, invoicing data | Luxembourg | Processed under Art. 28 GDPR |
| Cerebras Systems, Inc. | AI inference for chat responses | Chat content, system prompt, knowledge-base excerpts where applicable | USA | Processed under Art. 28 GDPR; third-country transfer under EU Standard Contractual Clauses (SCCs, Art. 46) |
| Google Ireland Ltd. | AI inference for chat responses | Chat content, system prompt, knowledge-base excerpts where applicable | Ireland (potentially other Google Cloud regions) | Processed under Art. 28 GDPR |
| Anthropic, PBC | AI inference for chat responses (Claude Fable 5 model: mandatory 30-day retention by Anthropic exclusively for safety purposes, no training) | Chat content, system prompt, knowledge-base excerpts where applicable | USA | Processed under Art. 28 GDPR; third-country transfer under EU Standard Contractual Clauses (SCCs, Art. 46) |
| X.AI LLC (xAI / Grok) | AI inference for chat responses (Grok model family; coding model selectable from the Pro plan) | Chat content, system prompt, knowledge-base excerpts where applicable | USA | Processed under Art. 28 GDPR; third-country transfer under EU Standard Contractual Clauses (SCCs, Art. 46) |
| Groq, Inc. | AI inference for chat responses (ultra-low latency) — currently deactivated, no productive data flow | Chat content, system prompt, knowledge-base excerpts where applicable | USA | Processed under Art. 28 GDPR; third-country transfer under EU Standard Contractual Clauses (SCCs, Art. 46) |
| OpenAI, L.L.C. | Safety moderation (OpenAI Moderation API) and AI inference for chat responses (GPT-4o and GPT-5 model families, selectable from the Pro plan) | Chat content, system prompt and knowledge-base excerpts where applicable; for moderation chat content excerpts — no training use per OpenAI API data policy | USA | Processed under Art. 28 GDPR; third-country transfer under EU Standard Contractual Clauses (SCCs, Art. 46) |
| PaceLab (Mitte processing server) | Enhancement of uploaded FiveM vehicle ZIPs (optional "vehicle tuning" module, only after consent; transfer over a private, encrypted connection) | vehicle ZIP uploaded by the end user, optional licence-plate parameters, technical metadata — input not stored, result deleted after max. 24 h | Germany | Processed under Art. 28 GDPR |
Further information on the subprocessors used can be provided on request.
Contact: [email protected].