# Sub-processors

ClauseBase engages the following entities to carry out specific processing activities related to the use of our products. 

{% hint style="info" %}
This list is relatively short, taking into account the wealth of features we offer. The reason is that, for a combination of data protection concerns and independence, we strive to host most services ourselves, instead of relying on third party services. Please note that, depending on the service and the region of the customer or user, different server environments may be used.
{% endhint %}

| **Subprocessor**                                       | **Purpose**                                                                                                                         | **Location**                                                                                         |
| ------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- |
| [Hetzner Online GmbH](https://www.hetzner.com)         | Cloud servers; primary backup servers                                                                                               | Germany & Finland                                                                                    |
| [Microsoft group entities](https://www.microsoft.com/) | Cloud infrastructure, application hosting (Azure), Office 365 productivity services, and AI-enabled features (including GPT models) | EEA and other regions depending on service configuration (including the United States and Australia) |
| [Scaleway](http://scaleway.com)                        | Encrypted secondary backups of databases                                                                                            | France                                                                                               |
| [MailJet Inc.](https://www.mailjet.com)                | Email communication                                                                                                                 | France                                                                                               |
| [DeepL GmbH](http://deepl.com)                         | Machine translation                                                                                                                 | Germany                                                                                              |
| [Odoo NV](https://www.odoo.com)                        | Communication, CRM & Project Management                                                                                             | Belgium                                                                                              |
| [Mailbox.org](https://www.mailbox.org)                 | Clause Hunt email attachments processor                                                                                             | Germany & Finland                                                                                    |
| [Elastic.co](https://www.elastic.co)                   | SIEM, XDR and statistics — logging                                                                                                  | Netherlands                                                                                          |

You may register (by [sending us an email](mailto:privacy@clausebase.com)) to stay up to date on intended changes to this list by clicking the button below and filling out your contact information. 

## Optional LLM suppliers

The following suppliers of LLM technology can be optionally chosen by the customer, instead of (or in addition to) Microsoft's GPT4o as the default LLM. 

To be clear: ClauseBase does not impose the use of these providers — they are entirely optional, and some customers will in fact want to actively refrain from certain of these LLM vendors due to customers' internal compliance constraints. In fact, customers can even specify in detail within the software which LLM must be used for which modules & user-profiles. 

| Vendor    | LLM                                           | Location      |
| --------- | --------------------------------------------- | ------------- |
| OpenAI    | GPT4o                                         | United States |
| Mistral   | Mistral Large                                 | France        |
| Anthropic | Claude3.5 Sonnet; Claude3 Opus; Claude3 Haiku | United States |
| Cohere    | Command                                       | Canada        |

## Other suppliers

While they do not process personal data or confidential information from our customers, we can also list the following third parties on which we rely: 

| Vendor                                                | Function                                                                            |
| ----------------------------------------------------- | ----------------------------------------------------------------------------------- |
| [Gitbook](http://gitbook.com)                         | Documentation website                                                               |
| [Helpdocs.io](https://www.helpdocs.io)                | ClauseBuddy documentation                                                           |
| [KeyCDN](https://www.keycdn.com)                      | Content Delivery Network (CDN) to improve the performance of static files           |
| [Webflow](https://www.webflow.com)                    | Front-end website                                                                   |
| [Plausible](https://www.plausible.io)                 | Front-end website statistics                                                        |
| [GoDaddy](https://godaddy.com)                        | Domain registration                                                                 |
| [Aikido](https://www.aikido.dev/)                     | Source code security checks                                                         |
| [NSec / Resilience](https://www.nsec-resilience.com/) | Penetration testing                                                                 |
| [Jamf](https://www.jamf.com/)                         | Mobile end-point management                                                         |
| [TeamViewer](https://www.teamviewer.com/)             | Remote support software                                                             |
| [JetBrains](http://jetbrains.com/)                    | [YouTrack](http://youtrack.jetbrains.com/) for source code control & dev management |

## Updates

* **2nd April 2021:** Move from Combell NV (hosting provider) to Upcloud Ltd.
* **February 2023:** Move from TeamLeader NV to Odoo NV for Communication, CRM & Project Management.
* **July 2023**: Addition of Mailbox.org and Elastic.co; updates to Upcloud (only encrypted backups) and DigitalOcean (no more backups).
* **February 2024:** Moved the location to [https://legal.clausebase.com](https://legal.clausebase.com/data-collected/logging-data); removed UpCloud; added Scaleway; removed DigitalOcean; added the "Other suppliers" section.
* **June 2024**: Added optional LLM providers.
* **June 2025**: Added Noxtua & Cohere (LLMs), Aikido (security checks), NSec (pentesting), TeamViewer (remote support), JamF (mobile end-point management), JetBrains (YouTrack).
* **December 2025**: Updated the subprocessor list to reflect Updated the text to reflect oncoming changes triggered by the acquisition by LawVu Limited.
* **4 February 2026**: removal of Xayn / Noxtua (no longer supported)

## Changes

An email notification service is available for subscribers who wish to be informed of updates to this list. Please visit [www.clausebase.com/subprocessor-changes-subscription](https://www.clausebase.com/subprocessor-changes-subscription) to subscribe.