Legal
Sub-processors
Last updated: 19 October 2026
To provide the Adgentic platform, ADGENTIC Iberia S.L. engages the service providers listed below. Each processes customer data only on our instructions, for the purpose stated, and under a data processing agreement that meets Art. 28 GDPR. Where a provider processes data outside the European Economic Area, the transfer is protected by the EU Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.
We inform customers before we add or replace a sub-processor, as set out in our data processing agreement. Questions: hello@adgentic-ai.com.
Infrastructure and hosting
- Provider
- Supabase Inc.
- Purpose
- Database and file storage
- Data processed
- All platform data: accounts, brands, products, campaigns, generated assets, encrypted access tokens
- Location
- EU (Frankfurt)
- Transfer safeguard
- Data stored in the EU; SCCs for support access
- Provider
- Render Services, Inc.
- Purpose
- Application and background-job hosting
- Data processed
- All platform data in transit and in processing
- Location
- EU (Frankfurt)
- Transfer safeguard
- Processing in the EU; SCCs, DPF
- Provider
- Vercel Inc.
- Purpose
- Web application hosting
- Data processed
- Request data, account data in transit
- Location
- EU
- Transfer safeguard
- SCCs
- Provider
- Google Cloud (Google Ireland Ltd.)
- Purpose
- Key management for signing Content Credentials on AI-generated images
- Data processed
- Cryptographic fingerprints of generated images; no image content, no personal data
- Location
- EU (Frankfurt, europe-west3)
- Transfer safeguard
- Processing in the EU
| Provider | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase Inc. | Database and file storage | All platform data: accounts, brands, products, campaigns, generated assets, encrypted access tokens | EU (Frankfurt) | Data stored in the EU; SCCs for support access |
| Render Services, Inc. | Application and background-job hosting | All platform data in transit and in processing | EU (Frankfurt) | Processing in the EU; SCCs, DPF |
| Vercel Inc. | Web application hosting | Request data, account data in transit | EU | SCCs |
| Google Cloud (Google Ireland Ltd.) | Key management for signing Content Credentials on AI-generated images | Cryptographic fingerprints of generated images; no image content, no personal data | EU (Frankfurt, europe-west3) | Processing in the EU |
AI models
- Provider
- OpenRouter, Inc.
- Purpose
- Routing requests to AI model providers
- Data processed
- Prompts and model output, which may contain brand, product and campaign content and, where a customer enters it, personal data
- Location
- USA
- Transfer safeguard
- SCCs
- Provider
- OpenAI, L.L.C. / OpenAI Ireland Ltd.
- Purpose
- Language and image models
- Data processed
- Prompts and model output
- Location
- USA
- Transfer safeguard
- SCCs, DPF
- Provider
- Anthropic, PBC
- Purpose
- Language models
- Data processed
- Prompts and model output
- Location
- USA
- Transfer safeguard
- SCCs
- Provider
- Microsoft Ireland Operations Ltd. (Azure)
- Purpose
- Language models (OpenAI and Anthropic models hosted on Azure)
- Data processed
- Prompts and model output
- Location
- EU and USA
- Transfer safeguard
- SCCs, DPF
- Provider
- Amazon Web Services EMEA SARL (Bedrock)
- Purpose
- Language models (Anthropic models hosted on AWS)
- Data processed
- Prompts and model output
- Location
- EU and global
- Transfer safeguard
- SCCs, DPF
- Provider
- Google Cloud (Google Ireland Ltd.), Vertex AI / Gemini
- Purpose
- Language and image models
- Data processed
- Prompts, reference images and model output
- Location
- EU and USA
- Transfer safeguard
- SCCs, DPF
| Provider | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| OpenRouter, Inc. | Routing requests to AI model providers | Prompts and model output, which may contain brand, product and campaign content and, where a customer enters it, personal data | USA | SCCs |
| OpenAI, L.L.C. / OpenAI Ireland Ltd. | Language and image models | Prompts and model output | USA | SCCs, DPF |
| Anthropic, PBC | Language models | Prompts and model output | USA | SCCs |
| Microsoft Ireland Operations Ltd. (Azure) | Language models (OpenAI and Anthropic models hosted on Azure) | Prompts and model output | EU and USA | SCCs, DPF |
| Amazon Web Services EMEA SARL (Bedrock) | Language models (Anthropic models hosted on AWS) | Prompts and model output | EU and global | SCCs, DPF |
| Google Cloud (Google Ireland Ltd.), Vertex AI / Gemini | Language and image models | Prompts, reference images and model output | EU and USA | SCCs, DPF |
We do not allow any of these providers to use customer data to train their models.
Monitoring and observability
- Provider
- Langfuse GmbH
- Purpose
- Tracing AI-agent runs, for quality and cost control
- Data processed
- Prompts, model output and metadata of agent runs
- Location
- EU
- Transfer safeguard
- Processing in the EU
- Provider
- Functional Software, Inc. (Sentry)
- Purpose
- Error monitoring
- Data processed
- Error reports, including the signed-in user's account identifier
- Location
- EU
- Transfer safeguard
- SCCs
- Provider
- Grafana Labs
- Purpose
- Application logs
- Data processed
- Technical logs; may contain account identifiers
- Location
- EU
- Transfer safeguard
- SCCs
| Provider | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Langfuse GmbH | Tracing AI-agent runs, for quality and cost control | Prompts, model output and metadata of agent runs | EU | Processing in the EU |
| Functional Software, Inc. (Sentry) | Error monitoring | Error reports, including the signed-in user's account identifier | EU | SCCs |
| Grafana Labs | Application logs | Technical logs; may contain account identifiers | EU | SCCs |
Billing and communication
- Provider
- Stripe Payments Europe, Ltd.
- Purpose
- Subscription billing and payments
- Data processed
- Billing contact, company and tax details, payment data (held by Stripe)
- Location
- EU and USA
- Transfer safeguard
- SCCs, DPF
- Provider
- Google Ireland Ltd. (Google Workspace)
- Purpose
- Email and internal operations alerts
- Data processed
- Business contact data and correspondence
- Location
- EU and USA
- Transfer safeguard
- SCCs, DPF
| Provider | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription billing and payments | Billing contact, company and tax details, payment data (held by Stripe) | EU and USA | SCCs, DPF |
| Google Ireland Ltd. (Google Workspace) | Email and internal operations alerts | Business contact data and correspondence | EU and USA | SCCs, DPF |
Not sub-processors
Platforms the customer connects (Shopify, Klaviyo, Meta, Google Ads) are chosen and contracted by the customer. We access them on the customer's instructions; they process the customer's data under their own terms with the customer, not on our behalf.
Our own website and internal tools (for example website hosting, website analytics, CRM, password manager, project management and team chat) are covered in our privacy policy.