Sub-Processors

Last updated November 29, 2025

At Dignify Chat, we are committed to protecting user privacy and ensuring transparency in how we handle data. This document outlines the sub-processors we use to provide our services and how we safeguard user data in compliance with privacy regulations.

What is a Sub-Processor?

A sub-processor is a third-party service that processes data on behalf of Dignify Chat to deliver core functionality. We carefully vet all sub-processors to ensure compliance with data protection laws such as GDPR and CCPA.

EU First, Privacy & Sustainability

By default we process and store personal data within the EEA. For some features we may process data outside the EEA (e.g. DNS/routing or AI), in which case we only use providers with appropriate safeguards (EU-US DPF and/or EU SCCs) and apply data minimisation. We're working with customers and partners towards 100% EU processing, and towards 100% renewable energy for our infrastructure.

Our Sub-Processors

Cloudflare

USA, EU

DNS and load balancing

Part of the EU's Data Privacy Framework (DPF) Program

Data Processed: Network traffic, request routing data

Hetzner

EU

Server hosting and infrastructure

EU Exclusive

Data Processed: Application data, server logs

PostHog (EU)

EU

Product analytics and event tracking

EU Exclusive

Data Processed: Usage analytics events, device and browser metadata, pseudonymous identifiers

Scaleway

EU

Sending automated emails

EU Exclusive

Data Processed: Email addresses, email content, delivery metrics

Google Gemini

USA, EU

AI foundation models and language processing

Part of the EU's Data Privacy Framework (DPF) Program

Data Processed: Chat messages, user queries (processed but not stored)

Microsoft Azure

USA, EU

AI foundation models and cloud services

Part of the EU's Data Privacy Framework (DPF) Program

Data Processed: Chat messages, user queries (processed but not stored)

Data Protection Measures

We implement strict data protection measures with our sub-processors:

  • Careful selection of sub-processors for GDPR and CCPA compliance
  • Data processing agreements (DPAs) with all sub-processors
  • Regular security assessments and compliance reviews
  • Minimal data sharing - only what's necessary for service delivery
  • Data retention policies aligned with legal requirements
  • Encryption in transit and at rest for all sensitive data

How We Manage Sub-Processors

We take several steps to ensure responsible data handling:

  • Due diligence review before engaging any sub-processor
  • Contractual obligations requiring compliance with applicable data protection laws
  • Regular monitoring of sub-processor security practices
  • Incident response procedures for data breaches
  • Right to audit sub-processor compliance upon request

Changes to Sub-Processors

We may add, remove, or change sub-processors from time to time. When material changes occur, we will update this page and notify affected customers in accordance with our privacy policy and applicable legal requirements.

Contact Us

If you have any questions about our sub-processors or data privacy practices, please contact us at [email protected] or by post to:

주식회사 몬드웍스 (MondWorks Inc.)
충민로 10
8층 S16-A153호
송파구, 서울특별시 05840
South Korea
[email protected]