Sub-processors
This is an English translation, provided for your convenience. The Dutch version is legally binding: if the two differ, the Dutch text prevails.
These are the parties that process personal data to make My Notetaker work. For business use, these are our sub-processors within the meaning of the data processing agreement.
| Sub-processor | Service and data | Location of the data | Safeguards |
|---|---|---|---|
| Artific B.V. Enschede, the Netherlands | AI platform: speech recognition, language models, embeddings, knowledge base and storage of all conversation content, contacts, profile photos and original audio | Google Cloud europe-west4 (Eemshaven, the Netherlands) | Data processing agreement; ISO/IEC 27001:2022 |
| Google Cloud EMEA Ltd. Dublin, Ireland (sub-processor of Artific) | Infrastructure, storage and AI models (Vertex AI) for Artific | europe-west4 (the Netherlands) | Cloud Data Processing Addendum; EU-U.S. Data Privacy Framework and standard contractual clauses for any access from the US |
| LangChain, Inc. (LangSmith) San Francisco, US (sub-processor of Artific) | Monitoring of AI calls for Artific, to resolve incidents and report costs; sees conversation content in doing so. Kept for at most 30 days | EU environment (Google Cloud, EU) | Data Processing Addendum; EU-U.S. Data Privacy Framework and/or standard contractual clauses for any access from the US |
| Vercel Inc. San Francisco, US | Hosting of the website and application server; processes all requests, temporarily also audio; technical logs | Region fra1 (Frankfurt, Germany) | Data Processing Addendum; EU-U.S. Data Privacy Framework and/or standard contractual clauses |
| Neon, Inc. (part of Databricks) US | Database: accounts, metadata, subscription status, temporary encrypted audio during processing | AWS eu-central-1 (Frankfurt, Germany) | Data Processing Addendum with standard contractual clauses |
| Stripe Payments Europe, Ltd. Dublin, Ireland | Payments, subscriptions, invoices: organisation name, administrator's email address, billing address, VAT number, payment details. Never conversation content. | EU; Stripe may also process data in the US | Stripe Data Processing Agreement; EU-U.S. Data Privacy Framework and standard contractual clauses |
| Sendinblue SAS (Brevo) Paris, France | Sending service emails (confirming email address, resetting password, notification that a conversation is ready, summary by email if you turn it on, reminders about tasks and the trial period, a getting-started tip for new users, invitations, confirmation of withdrawal): email address and the text of the email. No conversation content, except the summary by email if the user turns it on: then the chosen parts of the analysis (such as the summary and action items), never the transcript. Brevo anonymously counts whether an email has been opened and whether a link has been clicked (not linked to your email address); we do not use this. | EU | Data Processing Agreement (Article 28 GDPR) |
Changes
If we add or replace a sub-processor, we announce this at least 30 days in advance in the app and on this page, and business customers receive an email about it. Business customers may object as described in Article 6 of the data processing agreement.
| Date | Change |
|---|---|
| 20 October 2026 | Brevo: description extended with the summary by email. It is off by default; only users who turn it on receive the chosen parts of the analysis by email. |
| 14 October 2026 | LangChain, Inc. (LangSmith) added as a sub-processor of Artific: monitoring of AI calls in the EU environment. |
| 11 October 2026 | Brevo: description updated. Brevo anonymously counts opens and clicks in service emails; this cannot be switched off at Brevo. |
| 5 October 2026 | Sendinblue SAS (Brevo) added for service emails. |
| 4 October 2026 | First publication of this list. |
Questions about our processors? Email info@my-ai.nl.