Sub-processors

ClauseBase engages the following entities to carry out specific processing activities related to the use of our products.

This list is relatively short, taking into account the wealth of features we offer. The reason is that, for a combination of data protection concerns and independence, we strive to host most services ourselves, instead of relying on third party services. Please note that, depending on the service and the region of the customer or user, different server environments may be used.

Subprocessor	Purpose	Location
Hetzner Online GmbH	Cloud servers; primary backup servers	Germany & Finland
Microsoft group entities	Cloud infrastructure, application hosting (Azure), Office 365 productivity services, and AI-enabled features (including GPT models)	EEA and other regions depending on service configuration (including the United States and Australia)
Scaleway	Encrypted secondary backups of databases	France
MailJet Inc.	Email communication	France
DeepL GmbH	Machine translation	Germany
Odoo NV	Communication, CRM & Project Management	Belgium
Mailbox.org	Clause Hunt email attachments processor	Germany & Finland
Elastic.co	SIEM, XDR and statistics — logging	Netherlands

You may register (by sending us an email) to stay up to date on intended changes to this list by clicking the button below and filling out your contact information.

Optional LLM suppliers

The following suppliers of LLM technology can be optionally chosen by the customer, instead of (or in addition to) Microsoft's GPT4o as the default LLM.

To be clear: ClauseBase does not impose the use of these providers — they are entirely optional, and some customers will in fact want to actively refrain from certain of these LLM vendors due to customers' internal compliance constraints. In fact, customers can even specify in detail within the software which LLM must be used for which modules & user-profiles.

Vendor	LLM	Location
OpenAI	GPT4o	United States
Mistral	Mistral Large	France
Anthropic	Claude3.5 Sonnet; Claude3 Opus; Claude3 Haiku	United States
Xayn	Noxtua	Germany
Cohere	Command	Canada

Other suppliers

While they do not process personal data or confidential information from our customers, we can also list the following third parties on which we rely:

Vendor	Function
Gitbook	Documentation website
Helpdocs.io	ClauseBuddy documentation
KeyCDN	Content Delivery Network (CDN) to improve the performance of static files
Webflow	Front-end website
Plausible	Front-end website statistics
GoDaddy	Domain registration
Aikido	Source code security checks
NSec / Resilience	Penetration testing
Jamf	Mobile end-point management
TeamViewer	Remote support software
JetBrains	YouTrack for source code control & dev management

Updates

• 2nd April 2021: Move from Combell NV (hosting provider) to Upcloud Ltd.

• February 2023: Move from TeamLeader NV to Odoo NV for Communication, CRM & Project Management.

• July 2023: Addition of Mailbox.org and Elastic.co; updates to Upcloud (only encrypted backups) and DigitalOcean (no more backups).

• February 2024: Moved the location to https://legal.clausebase.com; removed UpCloud; added Scaleway; removed DigitalOcean; added the "Other suppliers" section.

• June 2024: Added optional LLM providers.

• June 2025: Added Noxtua & Cohere (LLMs), Aikido (security checks), NSec (pentesting), TeamViewer (remote support), JamF (mobile end-point management), JetBrains (YouTrack).

• December 2025: Updated the subprocessor list to reflect Updated the text to reflect oncoming changes triggered by the acquisition by LawVu Limited.

Changes

An email notification service is available for subscribers who wish to be informed of updates to this list. Please visit www.clausebase.com/subprocessor-changes-subscription to subscribe.