> ## Documentation Index > Fetch the complete documentation index at: https://docs.genie-app.de/llms.txt > Use this file to discover all available pages before exploring further. # Annex A — List of subprocessors > Directory of subprocessors used by Genie, including the default path, third-country strategy, and notification process. Annex to the customer compliance package. Audience: customers, their procurement teams, and their data protection officers (DPOs). This document is **Annex A** to the [customer compliance package](/compliance/kunden-compliance-paket) and can be sent independently. It corresponds in substance to §4 of the main document and is kept in sync with it. **Note on legal entity.** The customer of record for this annex is the Genie entity named in the order form. See §0 of the customer compliance package for the full legal entity name. *** ## A.1 Scope The subprocessors listed here are engaged by the processor named in the order form to provide the Genie service. For each listed subprocessor, a signed Data Processing Agreement (DPA) or Standard Contractual Clauses (SCC) are in place. ## A.2 Default path and third-country strategy Genie processes personal data in the EU by default. For GDPR-sensitive setups — in particular Teams workspaces and larger enterprise customers — the following applies: * **EU-only default (Teams).** LLM inference for Teams accounts is configured to route via AWS Bedrock (`eu-central-1`, Germany). Under this configuration, prompts and completions are, to our knowledge, not processed outside the EU. The remaining core services (AWS Aurora, S3, DynamoDB, KMS, Auth0, Vercel Functions, Resend, Supabase provisioning) are likewise EU-resident. We recommend this path as the enterprise and GDPR default. * **Contractual no-training-on-inputs commitments.** Where LLM providers receive live customer data, we hold contractual zero-data-retention / no-training-on-inputs commitments (Anthropic, OpenAI, AWS Bedrock, Google Vertex). These commitments are backed by the respective DPAs and provider statements; auditable evidence (DPA excerpts, provider statements) is available on request via `privacy@genie-app.de`. For Google Vertex, the relevant commitment is publicly documented in the [Google Cloud Data Processing Addendum (CDPA)](https://cloud.google.com/terms/data-processing-addendum), which covers Google Cloud Platform including Vertex AI (as of June 2026). * **US providers — optional opt-in, not the default.** Anthropic and OpenAI (outside Bedrock), Perplexity, Replicate, Hugging Face, xAI, and optionally Voyage are used only for Starter / Genie plans or after explicit activation by the customer in the project settings. For Teams customers, they are not the default path and can be fully disabled. * **Third-country transfer basis.** Transfers outside the EU/EEA rely on the EU Standard Contractual Clauses (Modules 2/3, Implementing Decision 2021/914) and, where applicable, the EU–US Data Privacy Framework. For every US provider with access to personal data, we hold an internal **Transfer Impact Assessment (TIA)** under EDPB Recommendations 01/2020. TIAs are updated at least annually and on an ad hoc basis. Summaries are available on request. * **Data minimization for third-country transfers.** Only the prompt and completion data required for inference is transmitted. Stable internal identifiers are, where technically possible, replaced with pseudonyms before transmission; live user identities (email, real name, Auth0 IDs) are, by design, not intended to be part of LLM payloads. Plaintext secrets, MCP credentials, and billing bodies are excluded from payloads by documented filtering and logging rules. * **Provider deactivation.** Customers can disable individual LLM providers in workspace settings. Teams customers can restrict the provider scope to "EU-only / AWS Bedrock"; in this configuration, requests to US providers are technically blocked. A central overview of active providers per workspace is available in admin settings. ## A.3 Subprocessors in use The following services are directly involved in operating the Genie platform and customer apps. They process end users' personal data. | # | Subprocessor | What they do for us | Data categories | Region | Compliance | | -- | -------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------ | --------------------------------------------------- | --------------------------------- | | 1 | **Auth0 (Okta)** | Federated identity, OIDC sign-in (password / social / SSO). We never see or store the password. | Email, name, Auth0 user ID, sign-in IP, MFA factors | EU | SOC 2 Type II, ISO 27001 | | 2 | **Stripe** | Subscription billing, payment methods, invoices, tax. PCI scope sits entirely with Stripe; we never see the PAN. | Name, email, billing address, payment-method token, invoice line items | EU | PCI DSS L1, SOC 1/2 | | 3 | **Braintrust** | LLM observability — traces, evals, prompt versions. 30-day retention. Only AI-related spans are exported (`filterAISpans`). **Teams workspaces are automatically excluded from trace export** (see Annex C). | Prompts, completions, traces | EU | SOC 2 Type II | | 4 | **AWS** (Aurora Postgres, S3, DynamoDB, Lambda, CloudFront, KMS, Secrets Manager, CodeBuild) | Primary application infrastructure: relational DB, object storage, key-value store, CDN, secret storage, build runner. | All application data; encrypted customer secrets | eu-central-1 (Germany) | ISO 27001, SOC 1/2/3, C5, FedRAMP | | 5 | **Supabase** | Per-customer Postgres + edge functions for the customer's own app. We hold only management API credentials. **Teams workspaces are provisioned in the EU (Germany) by default.** | Whatever the customer feeds into its app | EU (Germany) for Teams; otherwise customer's choice | SOC 2 Type II | | 6 | **Cloudflare** | CDN, WAF, DNS, custom-hostname routing, worker for tenant routing. Cloudflare processes request metadata and security events (WAF events) in particular to provide CDN, DNS, and WAF functionality. Edge termination happens primarily at EU PoPs. A DPA and EU SCCs are in place; Cloudflare's EU Data Boundary is used where applicable to our services. | TLS traffic, request metadata, IP, custom hostnames, WAF security events | Global edge network, primarily EU PoPs | ISO 27001, SOC 2 | | 7 | **Vercel** | Hosting of the Genie web application, OpenTelemetry bridge. Request routing happens automatically to the nearest server; serverless functions run in Germany. | Request metadata, telemetry, build logs | EU (Germany) | SOC 2 Type II | | 8 | **Anthropic** | LLM inference for Genie agent features and the LLM proxy (Starter / Genie plans). Contractual zero-retention commitment. **Teams users are routed via AWS Bedrock (eu-central-1) on the default path; direct data transmission to Anthropic is not intended under this configuration.** | Prompts and completions | US (SCC) — Starter / Genie plans only | SOC 2 Type II | | 9 | **AWS Bedrock** | LLM inference routed through our AWS account. **Default LLM provider for all Teams users** — the region configuration is designed so prompts and completions are processed within the EU. | Prompts and completions | eu-central-1 (Germany) | Inherits AWS posture | | 10 | **OpenAI** | LLM inference for non-Teams accounts. Contractual zero-data-retention commitment. | Prompts and completions | US (SCC) — Starter / Genie plans only | SOC 2 Type II | | 11 | **Google Vertex AI** | Optional LLM provider (Gemini) and embeddings. Processed under the [Google Cloud Data Processing Addendum (CDPA)](https://cloud.google.com/terms/data-processing-addendum). | Prompts and completions | EU region available | ISO 27001, SOC 1/2/3 | | 12 | **Mistral / xAI / Replicate / Voyage / Perplexity** | Optional LLM and embedding providers, selectable per project. | Prompts, completions, embeddings | Per provider; SCC for third countries | SOC 2 (respectively) | | 13 | **Resend** | Transactional email (proxy for customer edge functions). | Recipient address, subject, and content | EU | SOC 2 Type II | | 14 | **Hugging Face** | Inference proxy target for customer ML features. Only activated when the user explicitly configures it. | Prompts / inputs from customer edge functions | US (SCC); EU endpoint where available | SOC 2 Type II | ## A.4 Notification of changes Customers receive an email notification at least **30 days** before a new subprocessor begins processing, or before an existing subprocessor is replaced, sent to the primary contact named in the order form. Objections under Art. 28(2) GDPR are handled via `privacy@genie-app.de`. ## A.5 Contact and document status * **Privacy / DPA / subprocessor requests:** `privacy@genie-app.de` * **Security reports:** `security@genie-app.de` * **Versioning.** This annex is reviewed annually and whenever the subprocessor list changes materially, and is kept in sync with the [customer compliance package](/compliance/kunden-compliance-paket).