Last updated
Sub-processors
NeoAI (processor) uses the following sub-processors to host and operate the platform. Business customers (controllers) are notified by email and in the owner panel when this list changes materially; the current list is also referenced in our DPA and Privacy Policy.
Current sub-processors
Providers that may process personal data when delivering NeoAI for your workspace. “DPA with NeoAI” shows whether NeoAI holds a separate signed agreement or the vendor’s published terms apply (see provider notes).
| Provider | Service | Location | DPA with NeoAI |
|---|---|---|---|
| Contabo GmbH |
Cloud VPS hosting for the NeoAI application instance (operating system, application, and tenant data on the virtual server).
Note: Cloud VPS hosting. Contabo’s published GDPR Art. 28 terms for the Cloud VPS apply to the NeoAI server (Contabo GmbH, Munich; data centre: Contabo France SAS, Lauterbourg)—incorporated under Contabo’s contract terms, not a separate NeoAI signature. |
Germany / EU | Accepted via Provider’s ToS / API Terms |
| OpenAI | Large-language-model API when the tenant enables OpenAI (platform key or BYOK). | USA / EU regions | Accepted via Provider’s ToS / API Terms |
| Anthropic | Large-language-model API when the tenant enables Anthropic (platform key or BYOK). | USA / EU regions | Accepted via Provider’s ToS / API Terms |
| LLM and speech APIs when the tenant enables Google (platform key or BYOK). | USA / EU regions | Accepted via Provider’s ToS / API Terms | |
| DeepSeek |
LLM API only when the tenant explicitly configures BYOK.
Note: Enabled only when the tenant configures BYOK (Bring Your Own Key). NeoAI does not cover transfers outside the European Union for this provider. |
China / global | Accepted via Provider’s ToS / API Terms |
| ElevenLabs | Voice synthesis when the tenant enables voice features. | USA / EU | Accepted via Provider’s ToS / API Terms |
| OpenRouter | LLM routing API when the tenant enables OpenRouter. | USA | Accepted via Provider’s ToS / API Terms |
| Meta Platforms / WhatsApp Business |
WhatsApp messaging and Embedded Signup when the tenant connects WhatsApp.
Note: WhatsApp Cloud API. Processing terms: WhatsApp Business Data Processing Terms (whatsapp.com/legal/business-data-processing-terms), incorporated when NeoAI uses the Business Platform—no separate NeoAI signature. |
Ireland / global | Accepted via Provider’s ToS / API Terms |
| Backblaze B2 |
Object storage for tenant knowledge media and attachments when configured.
Note: B2 object storage. Backblaze Terms of Service and published DPA addendum (backblaze.com/company/dpa.html) apply to the NeoAI storage account—no separate NeoAI signature. |
USA / EU | Accepted via Provider’s ToS / API Terms |
| OVHcloud |
Transactional SMTP for account, lead, ticket, and compliance notifications via the instance OVHcloud mail service.
Note: Transactional email. NeoAI sends service mail through OVHcloud SMTP under OVH’s general terms and data-processing provisions for the mail account—incorporated under the OVH agreement, not a separate NeoAI signature. |
France / EU | Accepted via Provider’s ToS / API Terms |
| Stripe |
Payment processing for NeoAI credits when billing is enabled.
Note: Payments. Stripe Services Agreement and Stripe Data Processing Agreement apply to the NeoAI Stripe account when billing is enabled—incorporated under Stripe’s terms, not a separate NeoAI signature. |
USA / EU | Accepted via Provider’s ToS / API Terms |
Objecting to a new sub-processor
Under GDPR Article 28(2), you must be informed before we engage a new sub-processor or change an existing one in a way that affects your data. If you have legitimate grounds relating to data protection, contact us within 30 days of the notice. We will work with you in good faith; if the objection cannot be resolved, you may terminate the affected services according to our Terms of Service.
To close your workspace and request deletion of your data, use the account export and offboarding tools in the owner Legal section.