Subprocessors
Essential technical service providers currently used by CELVENO.
1. Current essential providers
| Provider | Purpose | Data categories | Possible region / transfer | Privacy information |
|---|---|---|---|---|
| Supabase | Database, auth/session backend, storage, Edge Functions, server-side processing | Accounts, roles, tenant assignment, customer/project/quote/invoice data, files and technical data depending on function | Primary CELVENO project: AWS eu-west-1 (Ireland). Subprocessing/support may involve additional locations. | DPA ↗ Regions ↗ |
| Cloudflare | Hosting/delivery of the web app, DNS, edge, network and security services | IP/connection, request, security and delivery data; content may technically transit the network | Global edge network; processing may occur in multiple countries depending on request and service | DPA ↗ Subprocessors ↗ |
| Hostinger | Hosting and technical delivery of the public WordPress website | Website content, technical server/connection data and, depending on hosting configuration, backup/log data | Under the active Hostinger hosting configuration and its subprocessors. The exact production data-centre region still requires operational confirmation. | Privacy ↗ |
| OpenAI Ireland Ltd. | Optional CELVENO AI functions: analysis, structuring, transcription, drafting, quote review | Only texts, document contents, images, voice and context required for the consciously invoked AI function | Ireland / further technical processing locations and subprocessors under OpenAI's DPA and subprocessor list | Business privacy ↗ Subprocessors ↗ |
| Resend / Plus Five Five, Inc. | Server-side delivery of certain CELVENO system/invoice emails where used by the relevant function | Email address, sender/recipient information, subject, message content, delivery/log data | Primary processing in the United States; further subprocessors under the provider's list. Resend states that Swiss transfers use SCC adaptations in its DPA. | DPA ↗ Subprocessors ↗ |
2. Additional details
Hostinger: The public CELVENO WordPress website is hosted with Hostinger. The exact production data-centre region and configured backup retention still require operational confirmation.
Supabase: The CELVENO Supabase project is currently configured in eu-west-1 (Ireland). Regional storage of the primary project does not mean that every support, security or subprocessing activity occurs exclusively in Ireland.
OpenAI: AI requests are sent server-side. API business data is not used for model training by default under the provider's current published terms unless an express opt-in is enabled. CELVENO currently uses store: false; this is not automatically equivalent to an account-wide Zero Data Retention configuration.
Resend: Resend is listed only insofar as CELVENO actually uses it for server-side system/invoice email flows. The public WordPress theme code itself does not include a Resend SDK.
3. International transfers
Where data is transferred to countries without an adequate level of protection, appropriate safeguards are used where required. Providers may use their own subprocessors. Their current DPA, security and subprocessor information additionally applies.
4. Changes to this list
CELVENO may replace or add providers for technical, security or economic reasons. Material changes are versioned on this page. Additional contractual information or objection rights remain unaffected.
English translation provided for information. Check it against the German original before relying on it for contractual purposes.