The current list
12 companies, each with the one job it does for mentionedin.ai.
mentionedin.ai (KvK 70562431, VAT NL002399377B14, The Hague, the Netherlands). A sub-processor is a company we use that may process personal data from your account. This page is Annex III of the Data Processing Agreement at /dpa/. We bind every company below to data protection terms at least as strict as the ones we give you.
| Entity | Country | Purpose | Data |
|---|---|---|---|
| OpenAI Ireland Ltd. (OpenAI OpCo, LLC) | Ireland, United States | The AI engines we measure, and AI processing for the product, depending on how requests are routed | Your prompts, brand facts and competitor names, and the answers returned |
| Google LLC (Gemini API, Google Cloud) | European Union, United States | The AI engines we measure, and AI processing for the product, depending on how requests are routed | Your prompts, brand facts and competitor names, and the answers returned |
| Anthropic PBC | United States | The AI engines we measure, and AI processing for the product, depending on how requests are routed | Your prompts, brand facts and competitor names, and the answers returned |
| VostokInc SAS (trading as ScrapingBee) | France | Fetches public pages of the sites you add for setup and the page grader, and reads Google results pages, including AI Overviews, for your prompts | Your domain and its public pages, your prompts |
| DataForSEO OÜ | Estonia | Search data for setup: competitor domains and keyword volumes for your prompts | Your domain, competitor domains, keywords |
| Hetzner Online GmbH | Germany | Hosting of the application, database and backups | All service data |
| Cloudflare, Inc. | United States, European Union | DNS, TLS, edge network and hosting of this website | Request metadata, IP addresses |
| Mailgun Technologies, Inc. (a Sinch AB company) | European Union (entity: United States) | Transactional email, sent from its EU region, and routing of mail to our support address | Account email address, email content |
| Google LLC (Google Workspace) | European Union, United States | Mailbox behind [email protected], and Sign in with Google when you choose it | Support messages, the sender's contact details, your Google account email |
| HubSpot, Inc. | United States, European Union | Support inbox for mail to [email protected] | Support messages and the sender's contact details |
| Stripe Payments Europe, Ltd. | Ireland | Checkout, subscriptions, invoices and tax | Billing contact and payment details (held by Stripe) |
| Sentry (Functional Software, Inc.) | European Union (entity: United States) | Application error and performance monitoring | Error reports, which can include request data |
Some AI processing, such as scoring the answers, may also run on our own servers in Germany, which is covered by the hosting row above.
Transfers outside the EU
Standard Contractual Clauses cover every transfer out of the EU.
mentionedin.ai is hosted in Germany. Where a sub-processor processes data outside the European Economic Area, such as in the United States, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
Changes to this list
14 days notice by email before a new sub-processor sees customer data.
- Before a new sub-processor processes customer data, we email every customer at least 14 days in advance and update this page.
- To object, email [email protected] before the date in the notice.
- If the objection cannot be resolved, you may terminate the affected service without penalty, as set out in the Terms.
Removing a sub-processor we no longer use needs no notice. We take it off this page.
Want change notices without being a customer? Email [email protected] and we add you to the notice list.