Compliance Hub: GDPR, AI Act, sub-processors

Updated: March 2026

Sub-processors (GDPR Art. 28).

The complete list of those who process personal data on behalf of our clients.

For service-specific sub-processors (AI providers, payment processors), refer to each product’s documentation below.
Category	Provider	Purpose	Location	Safeguards
AI model providers3 providers	Anthropic (Claude)	AI text generation	US (ZDR addendum available)	DPA SOC 2 Type II ISO 27001 SCCs
	OpenAI (GPT)	AI text generation, embeddings	US/EU (EU residency available)	DPA (OpenAI Ireland) SOC 2 ISO 27001 SCCs
	Google Gemini	Multimodal AI	EU via Vertex AI	Google Cloud DPA SOC 2 ISO 27001 SCCs
AI services4 providers	EdenAI	Speech-to-text gateway	France (EU)	GDPR compliant 24h data deletion
	Jina AI	Embeddings, reranking	Berlin, Germany (EU)	SOC 2 Type II
	Perplexity	AI search	US	DPA SOC 2 Type II SCCs
	OpenRouter	LLM routing gateway	US/EU (Enterprise)	DPA ZDR routing available
Document processing3 providers	PDF.co	PDF processing, OCR	US (AWS)	DPA via AWS SCCs encrypted at rest
	CloudConvert	Document conversion	Germany (EU)	ISO 27001 DPA on request
	Firecrawl	Web scraping	US	SOC 2 Type II DPA (Enterprise)
Infrastructure4 providers	Google Cloud / Firebase	Auth, database, storage	EU (europe-west)	DPA SOC 2 ISO 27001 SCCs
	Netlify	Web hosting, serverless	CDN worldwide, EU compute	DPA SOC 2 ISO 27001 SCCs
	Supabase	Database (select products)	EU (Frankfurt)	DPA SOC 2 SCCs
	Microsoft Clarity	Session analytics	US	Microsoft DPA SCCs
Communication1 provider	Resend	Transactional email	US	DPA SOC 2 Type II SCCs
Payment1 provider	Stripe	Payment processing	EU	PCI DSS Level 1 DPA SOC 2 ISO 27001
Other2 providers	PhantomBuster	LinkedIn data collection	France (AWS EMEA)	SOC 2 ISO 27001 DPA
Other2 providers	FAL AI	Video generation	US	Privacy policy + contractual clauses Trust Center

Public documents per product.

Privacy, DPA, TOMs, AI transparency, system cards, governance.

Filter documents

29 documents

easyboard.lu

Board meeting minutes platform for investment funds.

GDPR
AI Act
DPA
TOMs

easyblood.ai

AI blood test analysis, educational content only.

GDPR
AI Act Art.50
Health Data
Security

linkeme.ai

Social media content automation.

GDPR
Privacy
Cookies

LinkedInScope

linkedinscope.com

LinkedIn profile audit and AI photo generation.

GDPR
AI Act
AI Governance

easylaw.lu

AI for law firms, attorney-client privilege guaranteed.

GDPR
AI Act
Attorney-Client Privilege

easycore.ai

Autonomous AI agent platform, deployer Art. 26.

EU AI Act
Deployer Art.26

General documents available for download.

Easylab AI governance note
Legal identity, leadership, internal governance, sovereignty.
PDF · FR 713 KB · EN 701 KB
FR EN
Easylab Privacy Policy
GDPR Article 13 framework, data subject rights, retention periods.
HTML · 33 KB
Open
DPIA Screening Checklist
DPIA screening tool aligned with EDPB guidelines.
HTML · 30 KB
Open
MSA Template
Standard Master Service Agreement template for Easylab AI engagements.
HTML · 43 KB
Open
Custom AI Services Governance
Framework for custom AI development and integration services.
HTML · 36 KB
Open
Automation and Workflows Governance
Framework for AI automation services (n8n, APIs, integrations).
HTML · 26 KB
Open
Easylab AI Brochures (Finance, Flow, Compliance, Governance)
All Easylab AI editorial brochures, FR and EN.
Site page
View