The vendors below may process Customer Data on Rahoto's behalf to deliver the Service. AI providers receive only the input needed for their task. As text, that is the user's prompt and the structure and summary statistics of Customer Data, not its rows, plus the content the task works on: the report's own text and figures, content a user selects for Ask Rahoto, and passages from text sources a user asks Rahoto to analyse. Names and other common identifiers in that text are pseudonymised first. Images of report pages, and media and documents submitted for transcription or text extraction, are processed as submitted. Under their API terms they do not train on Customer Data. We give at least 30 days' notice before adding a sub-processor.
If your workspace connects its own AI model, the tasks you route to it are sent to that model’s provider under your own agreement with them; that provider is your vendor, not a Rahoto sub-processor, and Rahoto’s pseudonymisation still applies before the request leaves. The same holds for the data sources you connect and the delivery destinations you configure (for example your own Slack workspace, storage bucket or webhook): they are your vendors, not Rahoto sub-processors.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Application servers and database hosting | All Customer Data at rest in the database | EU (Helsinki, Finland) |
| Cloudflare, Inc. | File storage (R2) for report assets, exports, snapshots and database backups; asset delivery; DNS | Report assets, exports, snapshots and database backups | Western Europe (Cloudflare R2 location WEUR) |
| Resend | Account, verification and delivery-notification email | Recipient email address and message content | United States (sending region as set in the Resend contract) |
| Stripe | Subscription billing and payment processing | Billing contact, billing address and payment details | EU / US (SCCs) |
| Sign in with Google; Gemini API as a configured AI provider, also embeddings and image generation | Sign-in: name and email. Gemini: Your prompt and your data’s structure and summary statistics as text, not its rows, plus what a task works on (the report’s own text and figures, anything you point Ask Rahoto at, passages from text sources you analyse). Names, addresses, emails and phone, card, bank account and national ID numbers in that text are pseudonymised first. Images of report pages, and scans and audio you send for transcription or text extraction, are processed as submitted. Not used for training under the provider’s API terms. | EU / US (SCCs) | |
| Microsoft | Sign in with Microsoft | Name and email address | As set in the Microsoft contract |
| Anthropic | Claude API, a configured AI provider for report drafting and reasoning | Your prompt and your data’s structure and summary statistics as text, not its rows, plus what a task works on (the report’s own text and figures, anything you point Ask Rahoto at, passages from text sources you analyse). Names, addresses, emails and phone, card, bank account and national ID numbers in that text are pseudonymised first. Images of report pages, and scans and audio you send for transcription or text extraction, are processed as submitted. Not used for training under the provider’s API terms. | US (SCCs) |
| OpenAI | OpenAI API, a configured AI provider; also audio transcription, embeddings and image generation | Your prompt and your data’s structure and summary statistics as text, not its rows, plus what a task works on (the report’s own text and figures, anything you point Ask Rahoto at, passages from text sources you analyse). Names, addresses, emails and phone, card, bank account and national ID numbers in that text are pseudonymised first. Images of report pages, and scans and audio you send for transcription or text extraction, are processed as submitted. Not used for training under the provider’s API terms. | US (SCCs) |
| TypeSafe | Advisory check that cited sentences in an AI draft agree with their sources | Sentences from report drafts and the claims they cite | As set in the TypeSafe contract |
| Recraft | Draws vector illustrations when you ask Ask Rahoto for one. Not used when your workspace requires EU-only processing or its data classification forbids cloud AI. | It receives only a short abstract description of the artwork, never report data, figures, names or files; the description is scrubbed for personal details first. | Outside the EU |
Notifications
To receive advance notice of changes to this list, email support@rahoto.com with the subject "Sub-processor notifications". Enterprise customers receive notices through their designated security contact.
Related
See the Data Processing Agreement, Privacy Policy, and Trust Center for how this data is protected.