Sub-processors

These are the providers that process personal data when we provide Bifröst Orbit. We announce changes here at least 30 days before they take effect. Questions: legal@bifrostorbit.com.

Providers

Provider	What they do	Where	Safeguards
IONOS SE, Germany	Servers that run the platform and its database	Spain	EU
Amazon Web Services EMEA SARL, Luxembourg	Storage of uploaded files and of backups	Ireland	EU
Cloudflare, Inc., United States	Domain names, network delivery, protection against attacks, and checking that support chat messages come from a person (Turnstile)	Worldwide network	EU-U.S. Data Privacy Framework and Standard Contractual Clauses
Resend (Plus Five Five, Inc.), United States	Sign-in codes, invitations and notifications by email	Sent from Ireland	Standard Contractual Clauses
Slack Technologies Limited, Ireland (Salesforce)	Where our team reads and answers support chat messages and files	United States	EU-U.S. Data Privacy Framework and Standard Contractual Clauses
DeepL SE, Germany	Machine translation, only when someone asks for it	Germany	EU
Microsoft Ireland Operations Limited, Ireland	Single sign-on, only for organisations that connect their own Microsoft Entra tenant	Ireland	EU

Not sub-processors

AI assistants that an organisation connects to CMS Orbit, such as Claude or ChatGPT, are chosen and contracted by that organisation or its people. The same goes for the AI provider an organisation adds its own key for, to write with AI in the editor: Anthropic, OpenAI, Mistral or OpenRouter. They receive content because the organisation sends it to them, under the organisation's own agreement, and are not our sub-processors.