Sub processors list of LoyJoy GmbH
LoyJoy GmbH uses the following sub processors for processing personal data.
Mandatory sub processors
1) Google Cloud EMEA
Google Cloud EMEA Ltd, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Tasks: The LoyJoy infrastructure is operated in the Google Cloud by Google Ireland, and the server locations are within the EU. If personal data is processed, it is encrypted as far as possible.
Description of security measures concerning transfers to third countries (Art.44): EU standard contractual clauses, transport encryption with TLS.
We will provide you with the standard contractual clauses upon request.
2) Cloudflare
Cloudflare Inc, 101 Townsend St, San Francisco, CA 94107, USA
Tasks: LoyJoy uses services from “Cloudflare” for DDoS mitigation. Cloudflare operates a content delivery network (CDN) and provides protection functions for the LoyJoy web application (web application firewall). The data transfer between the browser and the LoyJoy servers is routed via the Cloudflare infrastructure, where it is analyzed to ward off attacks. The user’s IP address is visible to Cloudflare for technical reasons. No other personal data is transmitted via Cloudflare. Cloudflare is used in the interest of a secure use of LoyJoy and the defense against harmful attacks from the outside. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f DS-GVO. Further information can be found in the Cloudflare privacy policy: https://www.cloudflare.com/de-de/privacypolicy/
Cloudflare is listed on the qualified DDoS mitigation service provider list of the German Federal Office for Information Security (BSI). The list can be viewed at the following link:
https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Cyber-Sicherheit/Themen/Dienstleister-DDos-Mitigation-Liste.pdf
Description of security measures concerning transfers to third countries (Art.44): Transport encryption with TLS, certification according to the EU-U.S. Data Privacy Framework.
3) Amazon Web Services EMEA
Amazon Web Services EMEA SARL, 28 Avenue John F. Kennedy, L-1855, Luxembourg
Tasks: Email sending from LoyJoy is done via AWS. The server location is EU. For sending emails to end customers, a different SMTP can be stored in LoyJoy, effectively preventing the usage of AWS.
Description of security measures concerning transfers to third countries (Art.44): Transport encryption with TLS, certification according to the EU-U.S. Data Privacy Framework.
Optional sub processors
Upon request and instruction of the customer, the following sub processors may be used.
4) Microsoft Azure OpenAI (EU)
Microsoft Ireland Operations, Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
Tasks: Provide an AI-based Language Model to answer customer questions. The server location is EU.
Description of security measures concerning transfers to third countries (Art.44): Transport encryption with TLS, certification according to the EU-U.S. Data Privacy Framework.
5) OpenAI (USA)
OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA
Tasks: Provide an AI-based Language Model to answer customer questions. The server location is the US.
Description of security measures concerning transfers to third countries (Art.44): EU standard contractual clauses, transport encryption with TLS.
We will provide you with the standard contractual clauses upon request.
6) Hetzner
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen
Tasks: Provide AI-based Language Models to answer customer questions. Server location is Germany.
7) Anthropic
Anthropic PBC, 548 Market Street, PMB 90375 San Francisco CA 94104, USA
Tasks: Provision of an AI-based language model for answering customer questions. The server is located in the USA.
Description of security measures concerning transfers to third countries (Art.44): EU standard contractual clauses, transport encryption with TLS,
We will provide you with the standard contractual clauses upon request.
8) Mistral
Mistral AI, 15 Rue des Halles, 75001 Paris, France
Tasks: Provision of an AI-based language model for answering customer questions. The server is located in the EU.
9) Scaleway
Scaleway SAS, 8 rue de la Ville l’Evêque, 75008 Paris, France
Tasks: Provision of AI-based language models for answering customer questions. The server is located in the EU.