Subprocessors
Effective date: August 17, 2026
Boei uses a small number of trusted third-party service providers ("subprocessors") to help deliver our service. These subprocessors may process limited personal data on our behalf for the specific purposes listed below.
We carefully evaluate each provider's security, privacy, and compliance posture. Where applicable, we enter into Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) or other appropriate safeguards.
This page is the authoritative list of Boei's sub-processors and forms Annex 1 of our Data Processing Agreement.
| Sub-Processor | Registered Office | Services | Processing Location |
|---|---|---|---|
| Hetzner Online GmbH | Gunzenhausen, Germany | Primary server hosting, database hosting, and backup storage | EU (Nuremberg, Germany) (EEA) |
| Weaviate B.V. | Amsterdam, Netherlands | Vector database for AI chatbot knowledge base | EU (Frankfurt, Germany) (EEA) |
| Mistral AI, SAS | Paris, France | AI language model processing for chatbot functionality (configurable per customer) | EU (France) (EEA) |
| OpenAI, Inc. | San Francisco, CA, USA | AI language model processing for chatbot functionality (configurable per customer) | USA |
| Anthropic, PBC | San Francisco, CA, USA | AI language model processing for chatbot functionality (configurable per customer) | USA |
| Google LLC | Mountain View, CA, USA | AI language model processing via Gemini for chatbot functionality (configurable per customer) | USA |
| Amazon Web Services EMEA SARL | Luxembourg | Static asset storage (images) | EU-West (Ireland) (EEA) |
| Mailgun Technologies, Inc. | San Antonio, TX, USA | Transactional email delivery (notifications, chat transcripts) | EU (api.eu.mailgun.net) (EEA) |
| Firecrawl (Mendable, Inc.) | San Francisco, CA, USA | Website crawling for AI chatbot knowledge base ingestion | USA |
| Stripe, Inc. | San Francisco, CA, USA | Payment processing and subscription billing | USA |
| Cloudflare, Inc. | San Francisco, CA, USA | CDN, DNS, DDoS protection and Web Application Firewall for boei.help, app.boei.help and widget traffic | Global edge network (data processed at the nearest region; EU-first routing where available) |
| ProductLift | Utrecht, Netherlands | Product changelog widget embedded in the Boei admin area and authenticated feedback portal (feedback.boei.help) linked to Boei accounts for voting and posting. Operated by Ruby Foundry B.V., the same legal entity as Boei; listed for transparency. | EU (Falkenstein, Germany) (EEA) |
| Plausible Insights OÜ | Tallinn, Estonia | Cookie-less website analytics for boei.help (aggregate traffic metrics, no personal profiles) | EU (Germany) (EEA) |
| Google LLC (Google Tag Manager & Google Analytics 4) | Mountain View, CA, USA | Tag management and website analytics for boei.help (only loaded after consent via the cookie banner) | USA |
The AI model provider used for a specific Controller's chatbot is configurable and determined by the Controller's settings. Not all AI model providers listed above necessarily process data for each Controller. Analytics sub-processors (Plausible, Google Tag Manager, Google Analytics) apply only to Boei's own marketing website (boei.help) and do not process Controller Personal Data submitted through the Service.
Updates to This List
Boei may add or replace subprocessors as our service evolves. Any intended addition or replacement will be published on this page at least thirty (30) days prior to the change taking effect, including the date of the update. Customers with a signed Data Processing Agreement will also receive notice in accordance with that agreement.
Contact
If you have questions about our subprocessors or need a signed DPA, contact us at [email protected].