This page lists third parties that process personal data on behalf of Ajelix when we provide the platform, including when our customers use the service as controllers of their own data. For each subprocessor: what it processes, where, and the transfer mechanism. Under our DPA, customers get advance notice of additions and may object on data-protection grounds.
Not listed here: tools used only for our own website and marketing operations (Google Analytics 4, Meta Pixel) — those are covered in the Privacy Policy, where Ajelix is the controller.
2. AI inference runs on our own infrastructure
Ajelix does not send customer prompts, files, or outputs to any external AI model provider. All AI inference runs on servers owned by Ajelix, located in a dedicated facility in Riga, Latvia. Your data stays in the EU/EEA and is not transmitted to any US or third-country AI provider for inference.
Exception for service continuity. In exceptional situations, such as a disruption or failure of our own infrastructure, we may use a vetted external AI provider for as long as needed to keep the Service available. In that event: the provider is bound by data protection terms no weaker than those in the DPA, is prohibited from using your content for AI training, any transfer outside the EU/EEA is covered by the Standard Contractual Clauses or an adequacy mechanism, and the provider is added to this list with advance notice of at least 7 days as described in Section 5. We will communicate such use to affected customers.
3. Hosting and infrastructure
Provider
Service
Data
Location
Transfer mechanism
Ajelix (own hardware)
AI inference (GPU servers), application services
Prompts, file content processed for tasks, outputs
Riga, Latvia
Not applicable — within the EEA, own infrastructure
LVRTC
Data center services (rack, power, connectivity) for Ajelix-owned servers
Physical security for the infrastructure above
Riga, Latvia
Not applicable — within the EEA
Hetzner Online GmbH
Application hosting, databases, storage
Platform data, user accounts, email data
Germany
Not applicable — within the EEA
OVHcloud
Cloud hosting
Platform data, email data
Germany
Not applicable — within the EEA
4. Other subprocessors
Provider
Function
Data
Location
Transfer mechanism
Stripe
Payments, invoicing
Billing contact, amount, card token
EU/US
Standard Contractual Clauses where data leaves the EEA
Swedbank
Payments (bank transfers, invoicing)
Billing contact, payment details
EU (Baltics/Sweden)
Not applicable — within the EEA
Mailtrap
Transactional & marketing email delivery
Recipient email, name, delivery events
US (AWS, Google Cloud)
Standard Contractual Clauses
Google
OAuth sign-in & Workspace add-on platform
Account identifiers, granted scopes
US/global
Standard Contractual Clauses / EU–US Data Privacy Framework
The Ajelix website (ajelix.com) runs on infrastructure we operate ourselves in the EU; it is not a third-party subprocessor.
5. Change management
New or replacement subprocessors are announced on this page at least 7 days before processing starts, per DPA §4. This includes any external AI provider engaged under the service-continuity exception in Section 2.
