Subprocessors
Effective date: November 5, 2026
Boei uses a small number of trusted third-party service providers ("subprocessors") to help deliver our service. These subprocessors may process limited personal data on our behalf for the specific purposes listed below.
We carefully evaluate each provider's security, privacy, and compliance posture. Where applicable, we enter into Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) or other appropriate safeguards.
This page is the authoritative list of Boei's sub-processors and forms Annex 1 of our Data Processing Agreement.
| Sub-Processor | Registered Office / Incorporation Jurisdiction | Services | Processing Location |
|---|---|---|---|
| Hetzner Online GmbH | Gunzenhausen, Germany | Primary server hosting, database hosting, and backup storage | EU (Nuremberg, Germany) (EEA) |
| Weaviate B.V. | Amsterdam, Netherlands | Vector database for AI chatbot knowledge base | EU (Frankfurt, Germany) (EEA) |
| Mistral AI, SAS | Paris, France | AI language model processing for chatbot functionality (configurable per customer) | EU (France) (EEA) |
| OpenAI Ireland Ltd. | Ireland | AI language model processing for enabled chatbot and knowledge-base functions | USA and other locations under the applicable provider terms |
| Anthropic Ireland, Limited | Ireland | AI language model processing for chatbot functionality (configurable per customer) | USA and other locations under the applicable provider terms |
| Google Cloud EMEA Limited | 70 Sir John Rogerson's Quay, Dublin 2, Ireland | Gemini Developer API Paid Services for configured chatbot functionality, under Google's Data Processing Addendum for Products Where Google is a Data Processor | USA and other locations under the applicable provider terms |
| Amazon Web Services EMEA SARL | Luxembourg | Static asset storage (images) | EU-West (Ireland) (EEA) |
| Mailgun Technologies, Inc. | San Antonio, TX, USA | Email delivery via the Service. Used for: (a) emails from the Processor to Controller account holders (account notifications, billing, product updates, newsletters); (b) emails from the Controller to its data subjects where the Controller has enabled the email channel (replies, conversation messages); (c) chat transcripts sent to a data subject on request; (d) lead and conversation notifications to Controller staff. Not used for marketing by the Processor to the Controller's data subjects. | EU (api.eu.mailgun.net) (EEA) |
| SideGuide Technologies, Inc. d/b/a Firecrawl | Delaware, USA (incorporation jurisdiction) | Website crawling for AI chatbot knowledge base ingestion; fetched public pages may contain personal data | USA |
| Stripe, Inc. | San Francisco, CA, USA | Payment processing and subscription billing | USA |
| Cloudflare, Inc. | San Francisco, CA, USA | DNS and network-edge services for boei.help and cdn.boei.help where enabled, including static resources used by widgets. It may receive request metadata such as visitor IP addresses through those hosts. This does not describe app.boei.help or the chatbot API as Cloudflare-proxied. | Global edge network |
| ProductLift | Utrecht, Netherlands | Product changelog widget embedded in the Boei admin area and authenticated feedback portal (feedback.boei.help) linked to Boei accounts for voting and posting. Operated by Ruby Foundry B.V., the same legal entity as Boei; listed for transparency. | EU (Falkenstein, Germany) (EEA) |
| Plausible Insights OÜ | Tallinn, Estonia | Cookie-less website analytics for boei.help (aggregate traffic metrics, no personal profiles) | EU (Germany) (EEA) |
| Google LLC (Google Tag Manager & Google Analytics 4) | Mountain View, CA, USA | Tag management and website analytics for boei.help (only loaded after consent via the cookie banner) | USA |
The response-model choice is configurable. Providers may also support other enabled Service functions. The applicable provider information covers those functions as well; not all providers listed above necessarily process data for every customer. Analytics sub-processors (Plausible, Google Tag Manager, Google Analytics) apply only to Boei's own marketing website (boei.help) and do not process Controller Personal Data submitted through the Service.
Updates to This List
Boei may add or replace subprocessors as our service evolves. Any intended addition or replacement will be published on this page at least thirty (30) days prior to the change taking effect, including the date of the update. Customers with a signed Data Processing Agreement will also receive notice in accordance with that agreement.
Contact
If you have questions about our subprocessors or need a signed DPA, contact us at [email protected].