Sub-processors
These companies process personal data on our behalf when we run Maridex for you. Each one is bound by a data processing agreement with the same data protection obligations as ours. This list is part of our data processing agreement (Appendix 3).
Status: 14 November 2026
| Company | What it does for Maridex | Which data | Where | Transfers outside the EU |
|---|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen, Germany | servers and networks of your system | all data of your system | Germany (Falkenstein) | none |
| Backblaze, Inc., San Mateo, USA | storage for your files (documents and revisions) | documents and attachments | EU (Amsterdam, Netherlands) | possible access from the USA, based on the EU–US Data Privacy Framework and standard contractual clauses |
| OpenAI Ireland Limited, Dublin, Ireland | AI service: answering questions and searching by meaning | questions, the relevant passages of your documents, and document text for the search index | OpenAI group, including the USA | standard contractual clauses; no use for training |
| Cloudflare, Inc., San Francisco, USA | delivering the dashboard; licence check and updates of Maridex Onboard; receiving and forwarding emails for import (only if you use import by email) | IP addresses and browser data; licence number and app version; imported emails until they reach your system, at most 14 days | worldwide network | EU–US Data Privacy Framework and standard contractual clauses |
Not our sub-processors:
- Microsoft Entra ID: your own sign-in service, used under your company’s contract with Microsoft.
- Your own AI provider, if you have agreed with us that the assistant uses it.
Changes
Section titled “Changes”We tell you by email at least 30 days before we add or replace a sub-processor. You can object within those 30 days for reasons of data protection. If we can’t resolve your objection, you can end the contract before the change takes effect (section 5 of the data processing agreement).
A product of bitova GmbHbitova.com