Subprocessors

Overview

Ottili ONE engages subprocessors to provide its platform services. This page lists the current subprocessors, the purpose for which they are used, and the data processed on our behalf. The list is maintained in the canonical Ottili legal registry and is the single source of truth for this disclosure.

Current subprocessors

• Cloud hosting, compute and edge deliveryStatus: Current

  Region: EU/EEA · Category: infrastructure

  Hosts the Ottili ONE application, its runtime and edge delivery so the platform is available to customers.

  Data processed: Platform application and request data required to operate and deliver the service.

• Database and cachingStatus: Current

  Region: EU/EEA · Category: infrastructure

  Stores the platform's system-of-record data (PostgreSQL) and provides caching, queues, sessions and rate-limiting (Redis).

  Data processed: Workspace and operational data required to run the platform, persisted in the database and cache.

• Authentication and identityStatus: Current

  Region: EU/EEA · Category: infrastructure

  Provides account authentication, session management and identity verification for the platform (passwords hashed with Argon2id, API keys stored as HMAC-SHA256 hashes).

  Data processed: Account credentials (hashed), login and session metadata required to secure accounts.

• Email deliveryStatus: Current

  Region: EU/EEA · Category: communication

  Delivers transactional and support email (account, notifications and replies to privacy/support requests).

  Data processed: Recipient email addresses and message content required to send transactional and support email.

• StripeStatus: Current

  Vendor: Stripe · Region: EU/EEA · Category: payments

  Processes subscription payments and handles billing for Ottili ONE.

  Data processed: Billing details and payment metadata required to calculate charges and process payments.

• Anthropic, OpenAI and Google (Gemini)Status: Current

  Vendor: Anthropic; OpenAI; Google · Category: ai

  Provides the large-language-model inference that powers Ottili AI. AI processing stays inside your configured context.

  Data processed: Prompts and content you submit to Ottili AI, processed to generate responses within your configured context.

• Plausible and Google AnalyticsStatus: Current

  Vendor: Plausible; Google · Category: analytics

  Measures anonymized usage of the public website to improve content and performance.

  Data processed: Anonymous usage metrics (page views and similar) collected after consent, with no cross-site advertising profiling.

• Logging and monitoringStatus: Current

  Region: EU/EEA · Category: infrastructure

  Collects operational logs and error telemetry used to operate, secure and debug the platform.

  Data processed: Operational logs and error telemetry required to run and secure the platform.

Status shows whether a provider is actively used (Current) or an integration that is being prepared and will be published here once verified (Planned). No provider is listed as Current without verified, deployed use.

Changes and notifications

We will notify customers of material changes to the subprocessor list through the platform or by email. Customers may object to new subprocessors where permitted by applicable law.

Contact

For questions about subprocessors, contact datenschutz@ottili.one.