Transparency

Subprocessors

The nordnung.ai platform runs in data centers in Germany, with a dedicated instance per customer. For AI features we use the following subprocessors within the meaning of Art. 28 GDPR. They process data in European data centers (Microsoft: EU Data Boundary, which may include EFTA countries in addition to the EU; AWS: EU regions). If one provider is temporarily unavailable, processing automatically switches to the other. Customer content is not used to train the AI models.

Last updated: 18 June 2026

Provider	Purpose	Processing location	Safeguards
Microsoft Ireland Operations Ltd. (Azure OpenAI)	AI voice functions (Voice, OpenAI models)	Europe (EU Data Boundary)	Microsoft DPA · EU Data Boundary · SCC/DPF
Amazon Web Services EMEA SARL (AWS)	AI agent functions (Claude models)	EU regions	AWS DPA · SCC/DPF

Telecommunications (not Art. 28 GDPR)

SIP/telephony connectivity is provided by easybell GmbH. Telecommunications services are largely not processing on behalf within the meaning of Art. 28 GDPR: the provider is itself the controller for data relating to the circumstances of the telecommunication (e.g. billing data; cf. EDPB Guidelines 07/2020 on controller and processor) and does not take knowledge of the content in order to preserve telecommunications secrecy (§ 3 TDDDG). The telephone system and LiveKit instance are operated in-house.

Self-hosted (no external subprocessors)

Telephone system, LiveKit, HashiCorp Vault, MeshCentral, monitoring, and mail delivery are run as our own installations, not as external services. Providers/operators of the data center space receive no access to personal data.

Data Processing Agreement (DPA)

For customer processes we provide a data processing agreement under Art. 28 GDPR. The DPA including technical and organizational measures (TOM annex) is available on request at office@nordnung.ai.

Changes

Intended changes to the list of subprocessors are communicated to customers at least 30 days in advance. Customers with a data processing agreement may object within this period on important data protection grounds.

Data protection questions: office@nordnung.ai